StackRadar

GHSA-79jw-6wg7-r9g4

Critical

Advisory

Published 6 May 2021In the index since 13 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 17,781 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

Prototype Pollution in mixme

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
mixmenpm0.3.50.5.11
OSV records
GHSA-r5cq-9537-9rpfGHSA-79jw-6wg7-r9g4
Also known as
CVE-2021-28860, CVE-2021-29491

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry GHSA-79jw-6wg7-r9g4.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
mixme@0.3.5
0.5.1

Open the chart page →

8,213
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry GHSA-79jw-6wg7-r9g4.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
mixme@0.3.5
0.5.1

Open the chart page →

8,213

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
mixme@0.3.5
mixme@0.3.5
0.5.1
0.5.1
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.