StackRadarChart IndexLive demo

GHSA-8j8c-7jfh-h6hx

High

Advisory

Published 4 Jun 2019In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 21; of 17,781 indexed, latest versions
Container images: 19; deployed by those charts
Fix available: 1 of 1; affected package

Code Injection in js-yaml

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 19 images.

Affected package	Affected versions	Fixed in	Images
js-yamlnpm	1.0.3, 3.5.5, 3.6.1, 3.7.0+4 more	3.13.1	19

OSV records: GHSA-8j8c-7jfh-h6hx

Charts affected

21 by stars

Chart

Latest

Affected images

Radar Score

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	js-yaml@3.7.0	3.13.1

Open the chart page →

5,251

kongakonga

1 of 1 See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	js-yaml@3.5.5	3.13.1

Open the chart page →

5,209

ghostgeek-cookbook

1 of 1 See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
library/ghost :4.37.0	767230c0f263	js-yaml@1.0.3	3.13.1

Open the chart page →

4,260

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	js-yaml@3.5.5	3.13.1

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	js-yaml@3.6.1	3.13.1

Open the chart page →

4,069

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	js-yaml@3.7.0	3.13.1

Open the chart page →

29,901

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	js-yaml@3.5.5	3.13.1

Open the chart page →

27,417

kube-slackcloudnativeapp

1 of 1 See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
willwill/kube-slack :v4.1.1	d443017aae98	js-yaml@3.12.1	3.13.1

Open the chart page →

1,937

node-redcloudnativeapp

1 of 1 See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
nodered/node-red-docker :0.19.6-v8	070643219ea2	js-yaml@3.12.0	3.13.1

Open the chart page →

4,790

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	js-yaml@3.5.5	3.13.1

Open the chart page →

5,209

testnet-faucetethereum-helm-charts

1 of 1 See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
parithoshj/testnet-faucet :9859e0d	cdca426fea6d	js-yaml@3.12.1	3.13.1

Open the chart page →

3,005

business-api-ecosystemfiware

1 of 4 See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	js-yaml@3.7.0	3.13.1

Open the chart page →

64,489

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	js-yaml@3.12.0	3.13.1

Open the chart page →

5,941

ibm-business-automation-insights-devibm-charts

1 of 6 See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	js-yaml@3.11.0	3.13.1

Open the chart page →

39,349

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	js-yaml@3.11.0	3.13.1

Open the chart page →

57,669

yapijoelee2012

1 of 1 See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
jayfong/yapi :1.10.2	163e5d621910	js-yaml@3.7.0	3.13.1

Open the chart page →

6,454

monocularmonocular

1 of 5 See more

monocular monocular 1.4.15

1 of the 5 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	js-yaml@3.9.1	3.13.1

Open the chart page →

7,048

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	js-yaml@3.7.0	3.13.1

Open the chart page →

109,294

1 of 1 See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
gristlabs/grist :0.7.9	6e71b1914a7e	js-yaml@3.12.0	3.13.1

Open the chart page →

5,215

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	js-yaml@3.7.0	3.13.1

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry GHSA-8j8c-7jfh-h6hx.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	js-yaml@3.7.0	3.13.1

Open the chart page →

22,665

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	js-yaml@3.5.5	3.13.1	3
daskdev/dask-notebook :1.1.0	052630f5ca04	js-yaml@3.7.0	3.13.1	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	js-yaml@3.5.5	3.13.1	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	js-yaml@3.7.0	3.13.1	1
gristlabs/grist :0.7.9	6e71b1914a7e	js-yaml@3.12.0	3.13.1	1
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	js-yaml@3.11.0	3.13.1	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	js-yaml@3.11.0	3.13.1	1
jayfong/yapi :1.10.2	163e5d621910	js-yaml@3.7.0	3.13.1	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	js-yaml@3.6.1	3.13.1	1
library/ghost :4.37.0	767230c0f263	js-yaml@1.0.3	3.13.1	1
misskey/misskey :12.110.1	e08b7c478093	js-yaml@3.7.0	3.13.1	1
nodered/node-red-docker :0.19.6-v8	070643219ea2	js-yaml@3.12.0	3.13.1	1
parithoshj/testnet-faucet :9859e0d	cdca426fea6d	js-yaml@3.12.1	3.13.1	1
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	js-yaml@3.7.0	3.13.1	1
temporalio/web :1.14.0	33cfa863d8ce	js-yaml@3.7.0	3.13.1	1
ubercadence/web :v3.29.5	8564a5b44a6d	js-yaml@3.7.0	3.13.1	1
wekanteam/wekan :v4.22	68a51f0327df	js-yaml@3.12.0	3.13.1	1
willwill/kube-slack :v4.1.1	d443017aae98	js-yaml@3.12.1	3.13.1	1
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	js-yaml@3.9.1	3.13.1	1