StackRadarChart IndexLive demo

GHSA-7wwv-vh3v-89cq

Medium

Advisory

Published 4 Dec 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

ReDOS vulnerabities: multiple grammars

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
highlight.jsnpm	9.12.0, 9.13.1, 9.15.9, 9.18.1+4 more	10.4.1	17

OSV records: GHSA-7wwv-vh3v-89cq

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	highlight.js@9.18.3	10.4.1

Open the chart page →

5,251

wikijsgeek-cookbook

1 of 1 See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	highlight.js@10.2.1	10.4.1

Open the chart page →

5,946

soarv113assist-iot-cybersecurity-monitoring-soar

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-kbn :latest	0570b27bb7c2	highlight.js@9.18.5	10.4.1

Open the chart page →

17,896

siemassist-iot-cybersecurity-monitroting-siem

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	highlight.js@9.18.5	10.4.1

Open the chart page →

10,730

1 of 3 See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
testhubio/testhub-frontend :on-prem	e86c2db53be8	highlight.js@9.18.1	10.4.1

Open the chart page →

7,517

wikiwenerme

1 of 2 See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
requarks/wiki :latest	68f0d1848261	highlight.js@10.3.1	10.4.1

Open the chart page →

3,833

opendistro-esbeeinventor

1 of 3 See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	highlight.js@9.18.5	10.4.1

Open the chart page →

5,806

bzz-token-serviceethersphere

1 of 1 See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
ethersphere/bzz-token-service :latest	7624f11a72ad	highlight.js@9.18.5	10.4.1

Open the chart page →

3,260

wikijshomeenterpriseinc

1 of 1 See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
requarks/wiki :canary-2.5.243	8b5865a7386c	highlight.js@10.2.1	10.4.1

Open the chart page →

4,253

opendistro-eslsst-sqre

1 of 3 See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	highlight.js@9.12.0	10.4.1

Open the chart page →

7,929

aws-api-gateway-operatormintel

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	highlight.js@9.18.5	10.4.1

Open the chart page →

10,603

standard-application-stackmintel

1 of 12 See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	highlight.js@9.18.5	10.4.1

Open the chart page →

10,603

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	highlight.js@9.18.5	10.4.1

Open the chart page →

27,465

codimdphntom

1 of 3 See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
phntom/codimd :2.4.3	1b9aafbb62e6	highlight.js@9.15.9	10.4.1

Open the chart page →

6,524

1 of 1 See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
gristlabs/grist :0.7.9	6e71b1914a7e	highlight.js@9.13.1	10.4.1

Open the chart page →

5,215

csmmth-charts

1 of 3 See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
catalysm/csmm :latest	f003b35f54d9	highlight.js@9.18.5	10.4.1

Open the chart page →

3,576

saleor-appstrieb-work

2 of 5 See more

saleor-apps trieb-work 0.6.0

2 of the 5 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed :1.23.1	1d435b4ab372	highlight.js@9.18.5	10.4.1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp :1.4.3	57a06bfba327	highlight.js@9.18.5	10.4.1

Open the chart page →

6,994

wikiwikijs

1 of 2 See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
requarks/wiki :2	68f0d1848261	highlight.js@10.3.1	10.4.1

Open the chart page →

5,459

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-7wwv-vh3v-89cq.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	highlight.js@9.18.5	10.4.1

Open the chart page →

5,806

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	highlight.js@9.18.5	10.4.1	2
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	highlight.js@9.18.5	10.4.1	2
requarks/wiki :2 :latest	68f0d1848261	highlight.js@10.3.1	10.4.1	2
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	highlight.js@9.12.0	10.4.1	1
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	highlight.js@9.18.5	10.4.1	1
assistiot/cybersecurity-monitoring_ir-kbn :latest	0570b27bb7c2	highlight.js@9.18.5	10.4.1	1
catalysm/csmm :latest	f003b35f54d9	highlight.js@9.18.5	10.4.1	1
ethersphere/bzz-token-service :latest	7624f11a72ad	highlight.js@9.18.5	10.4.1	1
gristlabs/grist :0.7.9	6e71b1914a7e	highlight.js@9.13.1	10.4.1	1
linuxserver/codimd :latest	b801bbcf6386	highlight.js@9.18.5	10.4.1	1
misskey/misskey :12.110.1	e08b7c478093	highlight.js@9.18.3	10.4.1	1
phntom/codimd :2.4.3	1b9aafbb62e6	highlight.js@9.15.9	10.4.1	1
requarks/wiki :canary-2.5.243	8b5865a7386c	highlight.js@10.2.1	10.4.1	1
testhubio/testhub-frontend :on-prem	e86c2db53be8	highlight.js@9.18.1	10.4.1	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	highlight.js@10.2.1	10.4.1	1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed :1.23.1	1d435b4ab372	highlight.js@9.18.5	10.4.1	1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp :1.4.3	57a06bfba327	highlight.js@9.18.5	10.4.1	1