StackRadar

GHSA-r5fr-rjxr-66jc

High

Advisory

Published 6 May 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.213
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
476
of 17,787 indexed, latest versions
Container images
495
deployed by those charts
Fix available
3 of 3
affected packages

lodash vulnerable to Code Injection via `_.template` imports key names

Carried by container images the latest versions of 476 of 17,787 indexed charts deploy, on 495 images.

Affected packageAffected versionsFixed inImages
lodashnpm0.9.2, 1.0.2, 1.3.1, 2.4.1+13 more4.17.21, 4.18.0487
lodash-esnpm4.17.4, 4.17.15, 4.17.20, 4.17.21+2 more4.17.21, 4.18.0113
lodash.templatenpm2.4.1, 3.6.2, 4.5.0, 4.17.15+1 more4.18.046
OSV records
GHSA-35jh-r3h4-6jhmGHSA-r5fr-rjxr-66jc
Also known as
CVE-2021-23337, CVE-2026-4800

Charts affected

476 by stars
ChartLatestAffected imagesRadar Score
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
lodash@4.17.23
4.18.0

Open the chart page →

30,106
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

25,099
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
lodash@4.17.21
4.18.0

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
lodash@4.17.21
4.18.0

Open the chart page →

3,615
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
lodash@4.17.21
4.18.0

Open the chart page →

3,355
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
lodash@3.10.1
4.17.21
ibmcom/app-nav-ui:1.0.1e2a86997b36b
lodash@4.17.15
lodash@3.10.1
4.18.0
4.17.21

Open the chart page →

32,911
ibm-business-automation-insights-devibm-charts3.2.02 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

2 of the 6 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
lodash@4.17.10
4.17.21
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
lodash@4.17.10
4.17.21

Open the chart page →

39,343
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
lodash@4.17.5
4.17.21
ibmcom/microclimate-portal:latested5505e5c7ec
lodash@4.17.5
lodash.template@3.6.2
4.17.21
no fix listed
ibmcom/microclimate-theia:lateste17bdccc5030
lodash@3.10.1
4.17.21

Open the chart page →

57,728
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
lodash@4.17.15
4.17.21

Open the chart page →

4,504
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
lodash@4.17.21
4.18.0

Open the chart page →

11,838
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
lodash@4.17.21
4.18.0

Open the chart page →

3,289
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
lodash@4.17.21
lodash@4.17.20
lodash.template@4.5.0
4.18.0
4.17.21
no fix listed

Open the chart page →

4,944
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
lodash@4.17.15
4.17.21

Open the chart page →

10,542
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
lodash@4.17.21
lodash.template@4.5.0
4.18.0
no fix listed
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
lodash@4.17.21
4.18.0

Open the chart page →

6,831
interlay-firesquidinterlay0.1.111 of 4See more

interlay-firesquid interlay 0.1.11

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
lodash@4.17.21
4.18.0

Open the chart page →

4,667
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
lodash@4.17.21
lodash@4.17.15
lodash-es@4.17.15
4.18.0
4.17.21
4.17.21

Open the chart page →

7,233
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
lodash@4.17.21
4.18.0

Open the chart page →

2,363
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
lodash.template@4.5.0
no fix listed

Open the chart page →

3,448
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

5,826
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
lodash@4.17.4
4.17.21

Open the chart page →

4,614
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
lodash-es@4.17.21
lodash@4.17.15
lodash.template@4.5.0
4.18.0
4.17.21
no fix listed

Open the chart page →

6,452
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
lodash@4.17.21
4.18.0

Open the chart page →

22,665
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
lodash@4.17.21
4.18.0

Open the chart page →

59,560
docker-hub-rssjuniorjpdj0.1.311 of 1See more

docker-hub-rss juniorjpdj 0.1.31

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
lodash@4.17.21
4.18.0

Open the chart page →

1,967
todo-appjunktext-via-aws1.2.101 of 1See more

todo-app junktext-via-aws 1.2.10

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.34d44adf5a4da2
lodash@4.17.21
4.18.0

Open the chart page →

1,579
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
lodash@4.17.21
4.18.0

Open the chart page →

2,622
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
lodash@4.17.21
4.18.0

Open the chart page →

2,351
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
lodash.template@4.5.0
no fix listed

Open the chart page →

3,040
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
lodash@4.17.21
4.18.0

Open the chart page →

4,667
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
lodash@4.17.21
4.18.0

Open the chart page →

9,832
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
lodash@4.17.23
4.18.0

Open the chart page →

974
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
lodash@4.17.21
4.18.0

Open the chart page →

5,098
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
lodash@4.17.15
4.17.21

Open the chart page →

4,185
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
lodash@4.17.21
4.18.0

Open the chart page →

1,341
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
lodash@4.17.21
4.18.0

Open the chart page →

1,290
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
lodash@4.17.21
4.18.0

Open the chart page →

8,680
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
lodash@4.17.21
4.18.0

Open the chart page →

5,644
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
lodash@4.17.21
lodash@4.17.19
4.18.0
4.17.21

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

4,230
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
lodash@4.17.21
4.18.0

Open the chart page →

3,442
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
lodash@4.17.21
4.18.0

Open the chart page →

5,411
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
lodash@4.17.21
4.18.0

Open the chart page →

2,179
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
lodash@4.17.21
4.18.0

Open the chart page →

13,820
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
lodash@4.17.23
4.18.0

Open the chart page →

8,455
gptchat-api-feishubotkubegemsapp0.1.11 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
kubegems/chatgpt-api:latestf3c492a938ad
lodash@4.17.21
4.18.0

Open the chart page →

8,486
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
lodash.template@4.5.0
no fix listed

Open the chart page →

2,757
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
lodash@4.17.23
lodash-es@4.17.23
4.18.0
4.18.0

Open the chart page →

2,549
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
lodash@4.17.21
4.18.0

Open the chart page →

2,598
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
lodash@4.17.23
4.18.0

Open the chart page →

6,363
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry GHSA-r5fr-rjxr-66jc.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
lodash@4.17.21
4.18.0

Open the chart page →

2,444

Container images carrying it

495 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-webhook-service:2.26.3c58eb372c488
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
sqlpad/sqlpad:6.7d3d2f430dffd
lodash@4.17.21
lodash@4.17.19
4.18.0
4.17.21
1
stanfordoval/almond-server:latest1a63cdccedaf
lodash@4.17.21
4.18.0
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
lodash@4.17.21
4.18.0
1
supabase/storage-api:v1.12.0f983fb50bd95
lodash@4.17.21
4.18.0
1
supabase/studio:20241021-9f9b08326d8070c55e9
lodash@4.17.21
4.18.0
1
svenwal/jsonplaceholder:latestba2f285af432
lodash@4.17.21
4.18.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
lodash@4.17.21
lodash.template@4.17.15
lodash@4.17.15
4.18.0
4.18.0
4.17.21
1
sysnet4admin/colosseum-cms:loge74b43c7f492
lodash@4.17.21
4.18.0
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
lodash@4.17.21
4.18.0
1
temporalio/web:1.14.033cfa863d8ce
lodash@4.17.21
lodash-es@4.17.15
lodash-es@4.17.15
4.18.0
4.18.0
4.17.21
1
testhubio/testhub-frontend:on-preme86c2db53be8
lodash@4.17.15
lodash.template@4.5.0
lodash@4.17.15
lodash.template@4.5.0
4.18.0
4.18.0
4.17.21
no fix listed
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
lodash@4.17.21
4.18.0
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
lodash@4.17.21
4.18.0
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
lodash@4.17.21
4.18.0
1
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
lodash@4.17.21
4.18.0
1
thelounge/thelounge:4.3.0-alpine0037aa258261
lodash@4.17.21
4.18.0
1
thelounge/thelounge:4.2.0-alpine639978459c3a
lodash@4.17.20
lodash@4.17.20
4.18.0
4.17.21
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
lodash@4.17.21
4.18.0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
lodash@4.17.4
lodash@4.17.4
4.18.0
4.17.21
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
lodash@4.17.21
4.18.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
lodash@4.17.21
4.18.0
1
tzahi12345/youtubedl-material:4.23720b856bd2f
lodash@4.17.19
lodash@4.17.19
4.18.0
4.17.21
1
ubercadence/web:v3.29.58564a5b44a6d
lodash@4.17.20
lodash-es@4.17.20
lodash@4.17.20
lodash-es@4.17.20
4.18.0
4.18.0
4.17.21
4.17.21
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
lodash@4.17.21
4.18.0
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
lodash@4.17.23
4.18.0
1
unleashorg/unleash-server:7.5.09adb37e399ba
lodash@4.17.23
4.18.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
lodash@4.17.21
4.18.0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
lodash@4.17.21
4.18.0
1
vlebediantsev/notes-project-front:latest945675fd2636
lodash@4.17.21
4.18.0
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
lodash@4.17.21
4.18.0
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
wazuh/wazuh-dashboard:4.4.11787550d2358
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
wekanteam/wekan:v4.2268a51f0327df
lodash@4.17.19
lodash@4.17.19
lodash.template@3.6.2
4.18.0
4.17.21
no fix listed
1
willwill/kube-slack:v4.1.1d443017aae98
lodash@4.17.11
lodash@4.17.11
4.18.0
4.17.21
1
winfred008/amazon:910a68de5b398
lodash@4.17.21
4.18.0
1
wiremind/scrapoxy:lateste7048929a676
lodash@4.17.15
lodash@4.17.15
lodash.template@3.6.2
4.18.0
4.17.21
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
lodash@4.17.21
4.18.0
1
ymuski/skooner:latest67819ca511b5
lodash@4.17.21
4.18.0
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
lodash@4.17.21
4.18.0
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
lodash-es@4.17.22
4.18.0
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
lodash@4.17.21
4.18.0
1
zazuko/trifid:2.3.7054be137de70
lodash@4.17.21
4.18.0
1
zimengxiong/excalidash-backend:0.4.271273af713c91
lodash@4.17.23
4.18.0
1
zooz/predator:1.6f491d1f7a865
lodash@4.17.21
4.18.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.