StackRadar

GHSA-g84c-rxfj-3j2c

High

Advisory

Published 21 Mar 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.012
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,957 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath

Carried by container images the latest versions of 72 of 17,957 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
webpack-dev-middlewarenpm1.9.0, 1.11.0, 1.12.2, 2.0.6+14 more5.3.4, 7.4.664
OSV records
GHSA-g84c-rxfj-3j2cGHSA-wr3j-pwj9-hqq6
Also known as
CVE-2024-29180, CVE-2026-76844

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
webpack-dev-middleware@7.4.2
7.4.6

Open the chart page →

7,734
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
webpack-dev-middleware@3.7.2
5.3.4

Open the chart page →

5,489
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

3,844
open5gsopen5gsVerified publisher2.3.51 of 5See more

open5gs open5gs 2.3.5

1 of the 5 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
webpack-dev-middleware@1.11.0
5.3.4

Open the chart page →

9,492
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

15,947
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
webpack-dev-middleware@4.3.0
5.3.4

Open the chart page →

2,640
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
webpack-dev-middleware@4.3.0
5.3.4

Open the chart page →

7,821
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
webpack-dev-middleware@3.4.0
5.3.4

Open the chart page →

7,009
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
webpack-dev-middleware@5.3.1
5.3.4

Open the chart page →

19,988
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
webpack-dev-middleware@7.4.5
7.4.6

Open the chart page →

4,582
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ghcr.io/data-fair/metrics:0a8d40779eeae
webpack-dev-middleware@4.3.0
5.3.4

Open the chart page →

40,129
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

8,062
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

3,257
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

6,050
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
webpack-dev-middleware@3.6.1
5.3.4

Open the chart page →

3,529
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
webpack-dev-middleware@1.11.0
5.3.4

Open the chart page →

5,410
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
webpack-dev-middleware@7.4.2
7.4.6

Open the chart page →

33,687
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
webpack-dev-middleware@3.7.2
5.3.4

Open the chart page →

7,659
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
webpack-dev-middleware@5.3.4
7.4.6

Open the chart page →

13,489
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
webpack-dev-middleware@1.11.0
5.3.4

Open the chart page →

108,044
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
webpack-dev-middleware@3.4.0
5.3.4

Open the chart page →

3,369
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

2,471
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
webpack-dev-middleware@5.3.1
5.3.4

Open the chart page →

2,514
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

93,324
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
webpack-dev-middleware@3.7.2
5.3.4

Open the chart page →

26,272
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

4,858
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

4,858
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

4,858
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

13,287
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

9,503
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

3,974
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
webpack-dev-middleware@4.1.0
5.3.4

Open the chart page →

4,160
strapihelmforgeVerified publisher2.3.151 of 3See more

strapi helmforge 2.3.15

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
webpack-dev-middleware@6.1.3
7.4.6

Open the chart page →

2,004
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

3,851
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
webpack-dev-middleware@5.3.4
7.4.6

Open the chart page →

12,708
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
webpack-dev-middleware@1.9.0
5.3.4

Open the chart page →

6,656
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
webpack-dev-middleware@5.3.4
7.4.6

Open the chart page →

12,207
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
webpack-dev-middleware@3.7.2
5.3.4

Open the chart page →

3,744
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

5,588
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

6,050
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

118,714
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
webpack-dev-middleware@3.7.2
5.3.4

Open the chart page →

6,801
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
webpack-dev-middleware@4.3.0
5.3.4

Open the chart page →

6,918
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

2,233
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

2,233
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

2,262
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

2,233
my-helm-chartmy-helm-chart0.1.01 of 3See more

my-helm-chart my-helm-chart 0.1.0

1 of the 3 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
lyzhang1999/frontend:latest4b25cf264fd7
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

4,204
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
webpack-dev-middleware@5.3.3
5.3.4

Open the chart page →

19,164
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry GHSA-g84c-rxfj-3j2c.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
webpack-dev-middleware@3.7.3
5.3.4

Open the chart page →

3,377

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vlebediantsev/notes-admin-front:latest007c6670ff48
webpack-dev-middleware@5.3.3
webpack-dev-middleware@5.3.3
5.3.4
7.4.6
1
vlebediantsev/notes-project-front:latest945675fd2636
webpack-dev-middleware@5.3.3
webpack-dev-middleware@5.3.3
5.3.4
7.4.6
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
webpack-dev-middleware@5.3.3
webpack-dev-middleware@5.3.3
5.3.4
7.4.6
1
winfred008/amazon:910a68de5b398
webpack-dev-middleware@5.3.3
webpack-dev-middleware@5.3.3
5.3.4
7.4.6
1
ghcr.io/data-fair/metrics:0a8d40779eeae
webpack-dev-middleware@4.3.0
webpack-dev-middleware@4.3.0
5.3.4
7.4.6
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
webpack-dev-middleware@5.3.3
webpack-dev-middleware@5.3.3
5.3.4
7.4.6
1
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
webpack-dev-middleware@3.6.1
webpack-dev-middleware@3.6.1
5.3.4
7.4.6
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
webpack-dev-middleware@3.7.3
webpack-dev-middleware@3.7.3
5.3.4
7.4.6
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
webpack-dev-middleware@5.3.4
7.4.6
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
webpack-dev-middleware@6.1.2
7.4.6
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
webpack-dev-middleware@3.7.3
webpack-dev-middleware@3.7.3
5.3.4
7.4.6
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
webpack-dev-middleware@3.7.2
webpack-dev-middleware@3.7.2
5.3.4
7.4.6
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
webpack-dev-middleware@3.7.2
webpack-dev-middleware@3.7.2
5.3.4
7.4.6
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
webpack-dev-middleware@1.11.0
webpack-dev-middleware@1.11.0
5.3.4
7.4.6
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.