StackRadar

GHSA-r5fr-rjxr-66jc

High

Advisory

Published 6 May 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.213
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
476
of 17,787 indexed, latest versions
Container images
495
deployed by those charts
Fix available
3 of 3
affected packages

lodash vulnerable to Code Injection via `_.template` imports key names

Carried by container images the latest versions of 476 of 17,787 indexed charts deploy, on 495 images.

Affected packageAffected versionsFixed inImages
lodashnpm0.9.2, 1.0.2, 1.3.1, 2.4.1+13 more4.17.21, 4.18.0487
lodash-esnpm4.17.4, 4.17.15, 4.17.20, 4.17.21+2 more4.17.21, 4.18.0113
lodash.templatenpm2.4.1, 3.6.2, 4.5.0, 4.17.15+1 more4.18.046
OSV records
GHSA-35jh-r3h4-6jhmGHSA-r5fr-rjxr-66jc
Also known as
CVE-2021-23337, CVE-2026-4800

Charts affected

476 by stars
ChartLatestAffected imagesRadar Score
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

1,339
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
lodash@4.17.21
4.18.0

Open the chart page →

7,457
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
lodash@4.17.23
lodash-es@4.17.21
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
lodash@4.17.21
4.18.0

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
lodash@4.17.21
4.18.0

Open the chart page →

1,722
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
lodash@4.17.21
4.18.0
countly/frontend:25.05.42acbc11499b6
lodash@4.17.21
4.18.0

Open the chart page →

7,295
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
lodash@4.17.11
4.17.21

Open the chart page →

29,922
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
lodash@4.17.4
lodash@0.9.2
4.18.0
4.17.21

Open the chart page →

27,434
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
lodash@3.10.1
4.17.21

Open the chart page →

34,014
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
lodash@4.17.11
4.17.21

Open the chart page →

2,580
kube-slackcloudnativeapp1.0.01 of 1See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
willwill/kube-slack:v4.1.1d443017aae98
lodash@4.17.11
4.17.21

Open the chart page →

1,937
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
lodash@4.17.4
4.17.21

Open the chart page →

77,798
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
lodash@4.17.15
lodash.template@4.5.0
4.17.21
no fix listed

Open the chart page →

25,454
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

18,256
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
lodash@3.10.1
4.17.21

Open the chart page →

70,968
maildevcnieg1.1.11 of 1See more

maildev cnieg 1.1.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
cnieg/maildev:v1.1.998ee05668915
lodash@2.4.2
4.17.21

Open the chart page →

2,449
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
lodash@4.17.21
lodash.template@4.17.21
4.18.0
4.18.0

Open the chart page →

13,286
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

5,142
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

5,142
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

5,142
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
lodash-es@4.17.21
lodash@4.17.15
lodash.template@4.5.0
4.18.0
4.17.21
no fix listed

Open the chart page →

12,906
containers-security-chartscontainers-security0.1.02 of 7See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
lodash@4.17.21
4.18.0
coldatom/containers-security-front:latest7c2fbbb41bcf
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

9,146
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
lodash@4.17.21
4.18.0

Open the chart page →

8,251
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
lodash@4.17.21
4.18.0

Open the chart page →

5,489
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
lodash@4.17.15
lodash@2.4.1
4.18.0
4.17.21

Open the chart page →

5,209
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
lodash@4.17.21
lodash@3.10.1
4.18.0
4.17.21

Open the chart page →

3,769
swagger-combine-uicryptexlabsVerified publisher0.2.41 of 1See more

swagger-combine-ui cryptexlabs 0.2.4

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
cryptexlabs/swagger-combine-ui:0.2.1ed0bc94fd412
lodash@4.17.21
4.18.0

Open the chart page →

1,378
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

13,937
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
lodash@4.17.21
4.18.0

Open the chart page →

22,223
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
lodash@4.17.23
4.18.0

Open the chart page →

66,542
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
lodash@4.17.23
4.18.0

Open the chart page →

66,542
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
lodash@4.17.21
4.18.0

Open the chart page →

27,608
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
lodash@4.17.20
4.17.21
langgenius/dify-web:1.0.0d64914ff0d6d
lodash@4.17.21
4.18.0

Open the chart page →

19,063
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
lodash@4.17.21
4.18.0

Open the chart page →

4,217
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
lodash@4.17.20
4.17.21

Open the chart page →

4,223
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
lodash@4.17.21
4.18.0

Open the chart page →

24,714
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
lodash@4.17.21
4.18.0

Open the chart page →

4,253
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
lodash@4.17.15
4.17.21

Open the chart page →

11,174
picolorsealenn0.1.01 of 1See more

picolors ealenn 0.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ealen/picolors:0.1.03cb01dcbf652
lodash@4.17.15
4.17.21

Open the chart page →

576
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
lodash@4.17.23
4.18.0

Open the chart page →

30,167
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
lodash@4.17.21
lodash.template@4.5.0
4.18.0
no fix listed

Open the chart page →

3,745
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
lodash@4.17.21
4.18.0

Open the chart page →

27,349
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
lodash@4.17.21
4.18.0

Open the chart page →

27,314
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
lodash@4.17.21
4.18.0

Open the chart page →

27,188
blobscanethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ethpandaops/blobscan:latest7a9ab6370657
lodash@4.17.21
4.18.0

Open the chart page →

1,329
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
lodash@4.17.21
4.18.0

Open the chart page →

1,109
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
lodash@4.17.21
4.18.0

Open the chart page →

2,534
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
lodash@4.17.11
lodash.template@2.4.1
4.17.21
no fix listed

Open the chart page →

3,005
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
lodash@4.17.21
4.18.0

Open the chart page →

2,266

Container images carrying it

495 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
lodash@4.17.21
4.18.0
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
lodash@4.17.21
4.18.0
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
lodash@4.17.21
4.18.0
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
lodash@4.17.21
4.18.0
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
lodash@4.17.21
4.18.0
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
lodash@4.17.21
4.18.0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
lodash@4.17.21
4.18.0
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
lodash@4.17.21
4.18.0
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
lodash@4.17.21
lodash-es@4.17.20
lodash-es@4.17.20
4.18.0
4.18.0
4.17.21
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
lodash@4.17.21
4.18.0
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
lodash@4.17.23
lodash-es@4.17.23
4.18.0
4.18.0
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
lodash@4.17.21
4.18.0
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
lodash@4.17.21
4.18.0
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
lodash@4.17.21
4.18.0
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
lodash@4.17.21
4.18.0
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
lodash@4.17.21
4.18.0
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
lodash@4.17.20
lodash@4.17.20
4.18.0
4.17.21
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/wekan/wekan:v11.79039ef2b811cf
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
no fix listed
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
lodash@4.17.23
4.18.0
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
lodash@4.17.21
4.18.0
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
lodash@4.17.21
4.18.0
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
lodash@4.17.21
4.18.0
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
lodash@4.17.21
4.18.0
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
lodash@4.17.21
4.18.0
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
lodash@4.17.21
4.18.0
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
lodash@4.17.21
4.18.0
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
lodash@3.10.1
4.17.21
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
lodash@4.17.15
lodash.template@4.5.0
lodash@4.17.15
lodash.template@4.5.0
4.18.0
4.18.0
4.17.21
no fix listed
1
quay.io/mittwald/kube-mail:latest04f1099241fc
lodash@4.17.21
4.18.0
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
lodash@4.17.20
lodash.template@4.5.0
lodash@4.17.20
lodash.template@4.5.0
4.18.0
4.18.0
4.17.21
no fix listed
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
lodash@4.17.21
4.18.0
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
lodash@4.17.21
4.18.0
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
lodash@4.17.21
4.18.0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
lodash@4.17.15
lodash@4.17.15
4.18.0
4.17.21
1
quay.io/wekan/wekan:v5.65cb17600883a3
lodash@4.17.4
lodash@1.0.2
lodash.template@3.6.2
4.18.0
4.17.21
no fix listed
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
lodash@4.17.21
4.18.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
lodash@4.17.23
4.18.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
lodash@4.17.21
4.18.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
lodash@4.17.23
4.18.0
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
lodash@4.17.10
lodash-es@4.17.4
lodash@4.17.10
lodash-es@4.17.4
4.18.0
4.18.0
4.17.21
4.17.21
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.