StackRadar

GHSA-crmm-hgp2-wgrp

Medium

Advisory

Published 17 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

Laravel Framework: Temporary Signed URL Path Confusion

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
laravel/frameworkcomposer9.x-dev, 10.50.2, v5.0.35, v5.2.39+27 more12.61.1, 13.12.036
OSV records
GHSA-crmm-hgp2-wgrp

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
laravel/framework@v8.83.22
12.61.1

Open the chart page →

18,509
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
laravel/framework@v12.22.1
12.61.1

Open the chart page →

5,634
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
laravel/framework@v10.48.25
12.61.1

Open the chart page →

2,811
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
laravel/framework@v9.52.10
12.61.1

Open the chart page →

2,709
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
laravel/framework@v12.61.0
12.61.1

Open the chart page →

1,896
cachetdeliveryheroVerified publisher1.3.51 of 2See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.61.1

Open the chart page →

1,896
laravelrenoki-co1.0.01 of 2See more

laravel renoki-co 1.0.0

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
laravel/framework@v8.37.0
12.61.1

Open the chart page →

6,931
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
laravel/framework@v10.50.0
12.61.1

Open the chart page →

4,333
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
laravel/framework@v8.82.0
12.61.1

Open the chart page →

2,076
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
laravel/framework@v8.81.0
12.61.1

Open the chart page →

2,096
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
laravel/framework@v10.48.24
12.61.1

Open the chart page →

6,416
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
laravel/framework@v8.80.0
12.61.1

Open the chart page →

8,967
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
laravel/framework@v8.37.0
12.61.1

Open the chart page →

3,634
cachetadnoctemVerified publisher0.3.31 of 2See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.61.1

Open the chart page →

1,896
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
laravel/framework@9.x-dev
12.61.1

Open the chart page →

2,092
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
n22107670/sample-app:0.4.08f3072db7aeb
laravel/framework@v8.83.27
12.61.1

Open the chart page →

1,775
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
cspconsole/csp-control-center:1.0.1046dda4a31bd6
laravel/framework@10.50.2
12.61.1

Open the chart page →

12,274
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
laravel/framework@v10.44.0
12.61.1

Open the chart page →

1,664
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
laravel/framework@v8.83.12
12.61.1

Open the chart page →

20,933
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
laravel/framework@v12.55.1
12.61.1

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
laravel/framework@v12.55.1
12.61.1
fireflyiii/data-importer:version-2.2.3ab52bf932546
laravel/framework@v13.3.0
13.12.0

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
laravel/framework@v13.3.0
13.12.0

Open the chart page →

4,829
monicagabe565Verified publisher0.10.01 of 2See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
laravel/framework@v9.52.16
12.61.1

Open the chart page →

1,173
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
laravel/framework@v9.20.0
12.61.1

Open the chart page →

4,788
bookstackgeek-cookbookVerified publisher5.2.01 of 1See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
laravel/framework@v8.76.1
12.61.1

Open the chart page →

1,269
lycheegeek-cookbookVerified publisher6.4.21 of 1See more

lychee geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
laravel/framework@v8.37.0
12.61.1

Open the chart page →

601
cachethelm-charts-nr1.3.51 of 2See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.61.1

Open the chart page →

1,896
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
laravel/framework@v8.83.27
12.61.1

Open the chart page →

1,427
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
laravel/framework@v5.5.40
12.61.1

Open the chart page →

5,332
laravel-chartlaravel-application0.2.01 of 1See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
ibarreche/cloud-back-ci:lateste16a469c5791
laravel/framework@v5.8.38
12.61.1

Open the chart page →

1,835
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
laravel/framework@v10.13.0
12.61.1

Open the chart page →

12,813
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
laravel/framework@v10.48.23
12.61.1

Open the chart page →

2,293
firefly-iiiphntom0.2.101 of 2See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
laravel/framework@v9.11.0
12.61.1

Open the chart page →

1,813
podcast-helmpodcastwala-helm0.1.01 of 2See more

podcast-helm podcastwala-helm 0.1.0

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
shivani446/podcastwala-php:v1c0d07b7b4c8d
laravel/framework@v5.0.35
12.61.1

Open the chart page →

621
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
laravel/framework@v8.37.0
12.61.1

Open the chart page →

5,687
bookstackschmitzis0.1.11 of 1See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
solidnerd/bookstack:21.12762ffd5c51d3
laravel/framework@v8.76.1
12.61.1

Open the chart page →

2,751
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
laravel/framework@v11.45.1
12.61.1

Open the chart page →

6,094
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.61.1

Open the chart page →

1,896
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
laravel/framework@v8.83.17
12.61.1

Open the chart page →

2,019
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry GHSA-crmm-hgp2-wgrp.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
laravel/framework@v12.54.1
12.61.1

Open the chart page →

1,042

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.61.1
4
fireflyiii/core:version-6.5.9fe4ecec4c2ba
laravel/framework@v12.55.1
12.61.1
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
laravel/framework@v13.3.0
13.12.0
2
akaunting/akaunting:3.0.1552811b36ec3a
laravel/framework@v10.13.0
12.61.1
1
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
laravel/framework@v10.50.0
12.61.1
1
anonaddy/anonaddy:0.12.3957a95565166
laravel/framework@v9.20.0
12.61.1
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
laravel/framework@10.50.2
12.61.1
1
fireflyiii/core:version-5.6.142f4283bd0cf7
laravel/framework@v8.82.0
12.61.1
1
ibarreche/cloud-back-ci:lateste16a469c5791
laravel/framework@v5.8.38
12.61.1
1
invoiceninja/invoiceninja:5.6.241437916dee01
laravel/framework@v9.52.10
12.61.1
1
leantime/leantime:3.3.3ad4bfb0699d3
laravel/framework@v10.48.24
12.61.1
1
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
laravel/framework@v9.52.16
12.61.1
1
library/monica:3.7.0-apacheceb1ba4196ab
laravel/framework@v8.81.0
12.61.1
1
librenms/librenms:24.11.00920bc9117a8
laravel/framework@v10.48.23
12.61.1
1
librenms/librenms:22.4.14f1f3d667cc7
laravel/framework@v8.80.0
12.61.1
1
linkstackorg/linkstack:latest1c8b05399ee4
laravel/framework@9.x-dev
12.61.1
1
linuxserver/bookstack:26.05.202605282ebf97852661
laravel/framework@v12.61.0
12.61.1
1
linuxserver/heimdall:2.6.371597f4461e4
laravel/framework@v10.44.0
12.61.1
1
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
laravel/framework@v8.37.0
12.61.1
1
michaelepitech/sample-app:latestaf51d61c19f5
laravel/framework@v8.83.27
12.61.1
1
n22107670/sample-app:0.4.08f3072db7aeb
laravel/framework@v8.83.27
12.61.1
1
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
laravel/framework@v9.11.0
12.61.1
1
shivani446/podcastwala-php:v1c0d07b7b4c8d
laravel/framework@v5.0.35
12.61.1
1
snipe/snipe-it:v8.3.1141ebf2386fe
laravel/framework@v11.45.1
12.61.1
1
snipe/snipe-it:v6.0.1455fb7636a98c
laravel/framework@v8.83.22
12.61.1
1
solidnerd/bookstack:21.12762ffd5c51d3
laravel/framework@v8.76.1
12.61.1
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
laravel/framework@v5.5.40
12.61.1
1
ghcr.io/cedar2025/xboard:latest896e4926e0d7
laravel/framework@v12.54.1
12.61.1
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
laravel/framework@v10.48.25
12.61.1
1
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
laravel/framework@v8.76.1
12.61.1
1
ghcr.io/monicahq/monica-next:main8be69156acbb
laravel/framework@v12.22.1
12.61.1
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
laravel/framework@v8.83.17
12.61.1
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
laravel/framework@v8.83.12
12.61.1
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
laravel/framework@v8.37.0
12.61.1
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
laravel/framework@v8.37.0
12.61.1
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
laravel/framework@v8.37.0
12.61.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.