StackRadar

GHSA-9ggv-8w38-r7pm

Medium

Advisory

Published 19 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,787 indexed, latest versions
Container images
31
deployed by those charts
Fix available
1 of 1
affected package

TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)

Carried by container images the latest versions of 32 of 17,787 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
typeormnpm0.2.18, 0.2.32, 0.2.38, 0.2.39+12 more0.3.2931
OSV records
GHSA-9ggv-8w38-r7pm

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
typeorm@0.3.15
0.3.29

Open the chart page →

2,828
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
typeorm@0.3.15
0.3.29

Open the chart page →

1,721
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
typeorm@0.3.28
0.3.29

Open the chart page →

1,357
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
typeorm@0.3.12
0.3.29

Open the chart page →

14,231
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
typeorm@0.3.5
0.3.29

Open the chart page →

5,251
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
typeorm@0.3.18
0.3.29

Open the chart page →

2,635
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
typeorm@0.3.11
0.3.29

Open the chart page →

7,776
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
typeorm@0.3.12
0.3.29

Open the chart page →

2,703
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
typeorm@0.2.32
0.3.29

Open the chart page →

3,444
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
typeorm@0.3.28
0.3.29

Open the chart page →

5,508
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
typeorm@0.3.11
0.3.29

Open the chart page →

2,823
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
typeorm@0.3.10
0.3.29

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
typeorm@0.3.12
0.3.29

Open the chart page →

3,072
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.29

Open the chart page →

66,542
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.29

Open the chart page →

66,542
onboarding-portalfiware1.4.31 of 1See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
typeorm@0.3.28
0.3.29

Open the chart page →

1,437
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
typeorm@0.2.38
0.3.29
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
typeorm@0.2.38
0.3.29

Open the chart page →

6,831
interlay-firesquidinterlay0.1.112 of 4See more

interlay-firesquid interlay 0.1.11

2 of the 4 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
typeorm@0.3.9
0.3.29
subsquid/substrate-explorer:firesquid0889a857f192
typeorm@0.3.12
0.3.29

Open the chart page →

4,667
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
typeorm@0.3.26
0.3.29

Open the chart page →

1,290
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
typeorm@0.2.44
0.3.29

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
typeorm@0.2.41
0.3.29

Open the chart page →

5,411
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
typeorm@0.3.28
0.3.29

Open the chart page →

2,549
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
typeorm@0.3.12
0.3.29

Open the chart page →

3,556
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
typeorm@0.3.26
0.3.29

Open the chart page →

1,491
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
typeorm@0.3.19
0.3.29

Open the chart page →

6,722
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
typeorm@0.2.39
0.3.29

Open the chart page →

9,968
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
typeorm@0.3.15
0.3.29

Open the chart page →

1,884
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
typeorm@0.2.18
0.3.29

Open the chart page →

5,215
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
typeorm@0.3.12
0.3.29

Open the chart page →

15,623
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.29

Open the chart page →

66,542
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.29

Open the chart page →

36,661
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry GHSA-9ggv-8w38-r7pm.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.29

Open the chart page →

5,652

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.29
3
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.29
2
activepieces/activepieces:0.23.0c26188b44e62
typeorm@0.3.18
0.3.29
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
typeorm@0.3.10
0.3.29
1
bnjbvr/kresus:0.22.137e216b182c8
typeorm@0.3.12
0.3.29
1
fallenbagel/jellyseerr:latest4538137bc5af
typeorm@0.3.12
0.3.29
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
typeorm@0.3.12
0.3.29
1
gristlabs/grist:0.7.96e71b1914a7e
typeorm@0.2.18
0.3.29
1
heywood8/redisinsight:2.28.00bc9ab313d37
typeorm@0.3.15
0.3.29
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
typeorm@0.2.38
0.3.29
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
typeorm@0.3.9
0.3.29
1
linuxserver/overseerr:1.35.06108ed066d4a
typeorm@0.3.12
0.3.29
1
misskey/misskey:12.110.1e08b7c478093
typeorm@0.3.5
0.3.29
1
n8nio/n8n:0.212.0a9195bc499a3
typeorm@0.3.11
0.3.29
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
typeorm@0.2.44
0.3.29
1
redis/redisinsight:2.68019fcf774631
typeorm@0.3.15
0.3.29
1
redis/redisinsight:3.2.055542a762210
typeorm@0.3.26
0.3.29
1
redis/redisinsight:2.46699d341bd329
typeorm@0.3.15
0.3.29
1
redis/redisinsight:3.485562d67a912
typeorm@0.3.26
0.3.29
1
rocketadmin/rocketadmin:1.17.710955ef540b9
typeorm@0.3.28
0.3.29
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
typeorm@0.2.38
0.3.29
1
subsquid/substrate-explorer:firesquid0889a857f192
typeorm@0.3.12
0.3.29
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
typeorm@0.2.41
0.3.29
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
typeorm@0.3.11
0.3.29
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
typeorm@0.3.19
0.3.29
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
typeorm@0.2.32
0.3.29
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
typeorm@0.3.12
0.3.29
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
typeorm@0.3.28
0.3.29
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
typeorm@0.2.39
0.3.29
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
typeorm@0.3.28
0.3.29
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
typeorm@0.3.28
0.3.29
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.