StackRadar

GHSA-j5g3-5c8r-7qfx

Low

Advisory

Published 30 Aug 2023In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
2 of 2
affected packages

Prevent logging invalid header values

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
apollo-server-corenpm1.3.6, 2.14.2, 2.16.1, 2.18.2+8 more2.26.1, 3.12.119
@apollo/servernpm4.6.0, 4.7.44.9.32
OSV records
GHSA-j5g3-5c8r-7qfx

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
apollo-server-core@2.16.1
2.26.1

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
apollo-server-core@2.22.2
2.26.1

Open the chart page →

5,946
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
apollo-server-core@2.18.2
2.26.1

Open the chart page →

1,660
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
apollo-server-core@1.3.6
2.26.1

Open the chart page →

17,896
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
apollo-server-core@2.25.2
2.26.1

Open the chart page →

1,602
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
apollo-server-core@3.11.1
3.12.1

Open the chart page →

4,455
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
apollo-server-core@2.14.2
2.26.1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
apollo-server-core@2.14.2
2.26.1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
apollo-server-core@2.14.2
2.26.1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
apollo-server-core@2.14.2
2.26.1

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
apollo-server-core@2.16.1
2.26.1

Open the chart page →

8,213
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
apollo-server-core@2.25.2
2.26.1

Open the chart page →

4,253
interbtc-hydrainterlay0.1.151 of 4See more

interbtc-hydra interlay 0.1.15

1 of the 4 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
apollo-server-core@3.4.0
3.12.1

Open the chart page →

6,831
interlay-firesquidinterlay0.1.112 of 4See more

interlay-firesquid interlay 0.1.11

2 of the 4 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
apollo-server-core@3.10.2
3.12.1
subsquid/substrate-explorer:firesquid0889a857f192
apollo-server-core@3.11.1
3.12.1

Open the chart page →

4,667
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
apollo-server-core@2.25.2
2.26.1

Open the chart page →

7,232
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
apollo-server-core@3.6.3
3.12.1

Open the chart page →

4,230
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
@apollo/server@4.7.4
4.9.3

Open the chart page →

2,178
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
apollo-server-core@3.9.0
3.12.1

Open the chart page →

13,819
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
apollo-server-core@2.19.2
2.26.1

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
apollo-server-core@2.19.2
2.26.1

Open the chart page →

7,027
finance-portalmojaloop5.1.41 of 11See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
@apollo/server@4.6.0
4.9.3

Open the chart page →

14,809
reporting-hub-bop-api-svcmojaloop4.1.31 of 1See more

reporting-hub-bop-api-svc mojaloop 4.1.3

1 of the 1 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
@apollo/server@4.6.0
4.9.3

Open the chart page →

1,661
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry GHSA-j5g3-5c8r-7qfx.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
apollo-server-core@2.25.2
2.26.1

Open the chart page →

9,968

Container images carrying it

21 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
apollo-server-core@2.16.1
2.26.1
2
mesosphere/kommander:6.100.13917e82333a9
apollo-server-core@2.19.2
2.26.1
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
@apollo/server@4.6.0
4.9.3
2
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
apollo-server-core@1.3.6
2.26.1
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
apollo-server-core@3.11.1
3.12.1
1
electerious/ackee:3.2.05e7173fa321c
apollo-server-core@2.25.2
2.26.1
1
hansehe/graphql-gateway:1.0.458e09540afbc
apollo-server-core@2.18.2
2.26.1
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
apollo-server-core@3.4.0
3.12.1
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
apollo-server-core@3.10.2
3.12.1
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
apollo-server-core@3.9.0
3.12.1
1
kubebb/component-store:latestfd8ecbd73213
@apollo/server@4.7.4
4.9.3
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
apollo-server-core@3.6.3
3.12.1
1
requarks/wiki:canary-2.5.2438b5865a7386c
apollo-server-core@2.25.2
2.26.1
1
roadiehq/community-backstage-image:latestef355bf5b639
apollo-server-core@2.25.2
2.26.1
1
subsquid/substrate-explorer:firesquid0889a857f192
apollo-server-core@3.11.1
3.12.1
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
apollo-server-core@2.14.2
2.26.1
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
apollo-server-core@2.14.2
2.26.1
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
apollo-server-core@2.14.2
2.26.1
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
apollo-server-core@2.14.2
2.26.1
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
apollo-server-core@2.22.2
2.26.1
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
apollo-server-core@2.25.2
2.26.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.