StackRadarChart IndexLive demo

GHSA-g2v6-rqmx-r4w6

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026

Severity: High; worst across findings
CVSS: 7.2; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 32; of 18,035 indexed, latest versions
Container images: 30; deployed by those charts
Fix available: 1 of 1; affected package

@vue/server-renderer: XSS via missing CR in attribute-name blacklist

Carried by container images the latest versions of 32 of 18,035 indexed charts deploy, on 30 images.

Affected package	Affected versions	Fixed in	Images
@vue/server-renderernpm	3.2.31, 3.3.4, 3.4.19, 3.4.27+11 more	3.5.42	30

OSV records: GHSA-g2v6-rqmx-r4w6

Charts affected

32 by stars

Chart

Latest

Affected images

Radar Score

n8ncommunity-charts

1 of 1 See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.41.6	87e0bab2c931	@vue/server-renderer@3.5.40	3.5.42

Open the chart page →

1,436

n8nopen-8gears

1 of 1 See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.36.8	cfe2704ff858	@vue/server-renderer@3.5.40	3.5.42

Open the chart page →

2,298

n8nhelmforge

1 of 2 See more

n8n helmforge 2.1.3

1 of the 2 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.41.3	fdce8f852ac7	@vue/server-renderer@3.5.40	3.5.42

Open the chart page →

1,797

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	@vue/server-renderer@3.2.31	3.5.42

Open the chart page →

5,622

baserowbaserow-chart

1 of 6 See more

baserow baserow-chart 1.1.0

1 of the 6 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
baserow/web-frontend :2.4.0	0d91358ed205	@vue/server-renderer@3.5.40	3.5.42

Open the chart page →

19,196

wg-easywg-easy

1 of 1 See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15	0e7bc9d34e86	@vue/server-renderer@3.5.41	3.5.42

Open the chart page →

1,092

defectdojodefectdojo

1 of 4 See more

defectdojo defectdojo 1.9.55

1 of the 4 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
defectdojo/defectdojo-nginx :3.4.0	9d9595c5b20c	@vue/server-renderer@3.5.41	3.5.42

Open the chart page →

2,007

pretixtechwolf12

1 of 3 See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
pretix/standalone :2026.7.0	5df3b7aa852e	@vue/server-renderer@3.5.30	3.5.42

Open the chart page →

11,837

feedbacksystemthm-mni-ii

1 of 14 See more

feedbacksystem thm-mni-ii 0.48.2

1 of the 14 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/thm-mni-ii/fbs-qcm-frontend :v2.0.7	d5aa22a0ffe3	@vue/server-renderer@3.5.13	3.5.42

Open the chart page →

27,940

directusdirectus-io

1 of 3 See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
directus/directus :12.0.2	9c8470ea465c	@vue/server-renderer@3.5.24	3.5.42

Open the chart page →

9,382

uptime-kumageek-cookbook

1 of 1 See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.17.1	a4eab252e5a2	@vue/server-renderer@3.2.31	3.5.42

Open the chart page →

6,581

litlyxlitlyx

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
litlyx/litlyx-dashboard :latest	e64ff2d52385	@vue/server-renderer@3.5.25	3.5.42

Open the chart page →

9,668

wg-easyslybase-wg-easy

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	@vue/server-renderer@3.5.41	3.5.42

Open the chart page →

1,092

trifidzazuko

1 of 1 See more

trifid zazuko 0.2.1

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/zazuko/trifid :v6.0.1	59bda2bf65d4	@vue/server-renderer@3.5.38	3.5.42

Open the chart page →

614

platform-uiappscode

1 of 1 See more

platform-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/platform-ui :2.5.0	c27cafe398c2	@vue/server-renderer@3.5.27	3.5.42

Open the chart page →

853

astrotrekastria

1 of 4 See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	@vue/server-renderer@3.4.19	3.5.42

Open the chart page →

36,229

directusdirectus

1 of 4 See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
directus/directus :11.1.0	e3c8bb975350	@vue/server-renderer@3.4.27	3.5.42

Open the chart page →

5,444

openbashelm-openbas

1 of 7 See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
openbas/caldera-server :5.1.0	a277796d9724	@vue/server-renderer@3.3.4	3.5.42

Open the chart page →

25,794

cdashkitware

1 of 3 See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
kitware/cdash :v5.4.0	da5abe941506	@vue/server-renderer@3.5.41	3.5.42

Open the chart page →

13,265

n8nn8n-openshift

1 of 1 See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.36.7	14c4285bc303	@vue/server-renderer@3.5.40	3.5.42

Open the chart page →

2,298

nexus-tasksnexus-tasks

1 of 5 See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend :2.0.0	fcbab3a24880	@vue/server-renderer@3.5.30	3.5.42

Open the chart page →

4,613

indexer-toolsnodeify

1 of 1 See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	@vue/server-renderer@3.5.12	3.5.42

Open the chart page →

3,851

n8nopenshift

1 of 1 See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.36.7	14c4285bc303	@vue/server-renderer@3.5.40	3.5.42

Open the chart page →

2,298

claude-relayrevolution1

1 of 4 See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	@vue/server-renderer@3.5.18	3.5.42

Open the chart page →

5,938

elkrivals-space

1 of 1 See more

elk rivals-space 0.1.1

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/elk-zone/elk :main	d31e95cf9a89	@vue/server-renderer@3.5.30	3.5.42

Open the chart page →

410

s3-browsers3-browser

1 of 1 See more

s3-browser s3-browser 0.4.1

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
registry.gitlab.com/evolves-fr/s3-browser :0.4.1	c350c941fe7b	@vue/server-renderer@3.5.30	3.5.42

Open the chart page →

773

elk-frontendschoenwald

1 of 1 See more

elk-frontend schoenwald 0.2.22

1 of the 1 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
ghcr.io/elk-zone/elk :v1.0.1	236faedcb68a	@vue/server-renderer@3.5.30	3.5.42

Open the chart page →

683

speckle-server-branch-hotfix-2.19.1speckle

2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of 5 See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4f9241665ae3	@vue/server-renderer@3.4.29	3.5.42

Open the chart page →

18,134

speckle-server-branch-hotfix-2.20.2speckle

2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of 5 See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	fdc008effc7a	@vue/server-renderer@3.4.29	3.5.42

Open the chart page →

18,219

speckle-server-branch-testing1speckle

2.20.6-branch.testing1.154030-9b09114

1 of 5 See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.20.6-branch.testing1.154030-9b09114	32fc940d9b4c	@vue/server-renderer@3.4.29	3.5.42

Open the chart page →

18,219

speckle-server-branch-testing4speckle

2.20.2-branch.testing4.134160-9fad4b2

1 of 5 See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.20.2-branch.testing4.134160-9fad4b2	10ad4ade8bf2	@vue/server-renderer@3.4.29	3.5.42

Open the chart page →

17,788

speckle-server-branch-testing5speckle

2.21.3-branch.testing5.219631-2153bef

1 of 5 See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry GHSA-g2v6-rqmx-r4w6.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.21.3-branch.testing5.219631-2153bef	d4ca6ebf09b9	@vue/server-renderer@3.4.29	3.5.42

Open the chart page →

17,473

Container images carrying it

30 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
n8nio/n8n :2.36.7	14c4285bc303	@vue/server-renderer@3.5.40	3.5.42	2
ghcr.io/wg-easy/wg-easy :15 :15.4.0	0e7bc9d34e86	@vue/server-renderer@3.5.41	3.5.42	2
baserow/web-frontend :2.4.0	0d91358ed205	@vue/server-renderer@3.5.40	3.5.42	1
defectdojo/defectdojo-nginx :3.4.0	9d9595c5b20c	@vue/server-renderer@3.5.41	3.5.42	1
directus/directus :12.0.2	9c8470ea465c	@vue/server-renderer@3.5.24	3.5.42	1
directus/directus :11.1.0	e3c8bb975350	@vue/server-renderer@3.4.27	3.5.42	1
kitware/cdash :v5.4.0	da5abe941506	@vue/server-renderer@3.5.41	3.5.42	1
litlyx/litlyx-dashboard :latest	e64ff2d52385	@vue/server-renderer@3.5.25	3.5.42	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	@vue/server-renderer@3.2.31	3.5.42	1
misskey/misskey :12.110.1	e08b7c478093	@vue/server-renderer@3.2.31	3.5.42	1
n8nio/n8n :2.41.6	87e0bab2c931	@vue/server-renderer@3.5.40	3.5.42	1
n8nio/n8n :2.36.8	cfe2704ff858	@vue/server-renderer@3.5.40	3.5.42	1
n8nio/n8n :2.41.3	fdce8f852ac7	@vue/server-renderer@3.5.40	3.5.42	1
openbas/caldera-server :5.1.0	a277796d9724	@vue/server-renderer@3.3.4	3.5.42	1
pretix/standalone :2026.7.0	5df3b7aa852e	@vue/server-renderer@3.5.30	3.5.42	1
speckle/speckle-frontend-2 :2.20.2-branch.testing4.134160-9fad4b2	10ad4ade8bf2	@vue/server-renderer@3.4.29	3.5.42	1
speckle/speckle-frontend-2 :2.20.6-branch.testing1.154030-9b09114	32fc940d9b4c	@vue/server-renderer@3.4.29	3.5.42	1
speckle/speckle-frontend-2 :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4f9241665ae3	@vue/server-renderer@3.4.29	3.5.42	1
speckle/speckle-frontend-2 :2.21.3-branch.testing5.219631-2153bef	d4ca6ebf09b9	@vue/server-renderer@3.4.29	3.5.42	1
speckle/speckle-frontend-2 :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	fdc008effc7a	@vue/server-renderer@3.4.29	3.5.42	1
ghcr.io/appscode/platform-ui :2.5.0	c27cafe398c2	@vue/server-renderer@3.5.27	3.5.42	1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend :2.0.0	fcbab3a24880	@vue/server-renderer@3.5.30	3.5.42	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	@vue/server-renderer@3.4.19	3.5.42	1
ghcr.io/elk-zone/elk :v1.0.1	236faedcb68a	@vue/server-renderer@3.5.30	3.5.42	1
ghcr.io/elk-zone/elk :main	d31e95cf9a89	@vue/server-renderer@3.5.30	3.5.42	1
ghcr.io/thm-mni-ii/fbs-qcm-frontend :v2.0.7	d5aa22a0ffe3	@vue/server-renderer@3.5.13	3.5.42	1
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	@vue/server-renderer@3.5.12	3.5.42	1
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	@vue/server-renderer@3.5.18	3.5.42	1
ghcr.io/zazuko/trifid :v6.0.1	59bda2bf65d4	@vue/server-renderer@3.5.38	3.5.42	1
registry.gitlab.com/evolves-fr/s3-browser :0.4.1	c350c941fe7b	@vue/server-renderer@3.5.30	3.5.42	1