StackRadar

GHSA-rgwj-5xj2-c3m3

Medium

Advisory

Published 31 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
106
of 17,781 indexed, latest versions
Container images
90
deployed by those charts
Fix available
1 of 1
affected package

MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS

Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 90 images.

Affected packageAffected versionsFixed inImages
mysql2npm2.0.1, 2.1.0, 2.2.5, 2.3.0+30 more3.23.190
OSV records
GHSA-rgwj-5xj2-c3m3

Charts affected

106 by stars
ChartLatestAffected imagesRadar Score
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
mysql2@2.3.3
3.23.1

Open the chart page →

3,159
onboarding-portalfiware1.4.31 of 1See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
mysql2@3.22.0
3.23.1

Open the chart page →

1,489
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
mysql2@3.9.9
3.23.1

Open the chart page →

3,474
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
mysql2@3.9.1
3.23.1

Open the chart page →

9,019
ghosthelmforgeVerified publisher1.2.61 of 3See more

ghost helmforge 1.2.6

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
library/ghost:6.62.0a7a268bbfb7f
mysql2@3.22.5
3.23.1

Open the chart page →

2,463
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.0d50725df661f
mysql2@3.15.3
3.23.1

Open the chart page →

2,046
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
mysql2@3.22.5
3.23.1

Open the chart page →

2,061
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
mysql2@3.11.5
3.23.1

Open the chart page →

30,099
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.23.1

Open the chart page →

4,253
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
mysql2@3.9.8
3.23.1

Open the chart page →

3,014
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
mysql2@3.18.1
3.23.1

Open the chart page →

3,436
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
mysql2@3.11.0
3.23.1

Open the chart page →

5,826
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
mysql2@3.14.1
3.23.1

Open the chart page →

3,092
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
mysql2@3.12.0
3.23.1

Open the chart page →

5,228
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.23.1

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.23.1

Open the chart page →

4,230
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
mysql2@3.14.1
3.23.1

Open the chart page →

2,756
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
mysql2@3.15.3
3.23.1

Open the chart page →

1,498
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
mysql2@3.15.3
3.23.1

Open the chart page →

2,596
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
mysql2@3.11.5
3.23.1

Open the chart page →

6,356
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
mysql2@2.3.3
3.23.1

Open the chart page →

1,927
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.23.1

Open the chart page →

33,242
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.23.1

Open the chart page →

33,242
lynxpromptlynxpromptVerified publisher0.1.21 of 3See more

lynxprompt lynxprompt 0.1.2

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.0.75c6afb6679301
mysql2@3.15.3
3.23.1

Open the chart page →

1,852
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
mysql2@2.3.3
3.23.1

Open the chart page →

29,588
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.23.1

Open the chart page →

9,668
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.23.1

Open the chart page →

2,457
finance-portalmojaloop5.1.44 of 11See more

finance-portal mojaloop 5.1.4

4 of the 11 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.23.1
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.23.1
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.23.1
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.23.1

Open the chart page →

14,809
reporting-aggregator-svcmojaloop1.0.71 of 1See more

reporting-aggregator-svc mojaloop 1.0.7

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.23.1

Open the chart page →

800
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.23.1

Open the chart page →

2,631
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.23.1

Open the chart page →

2,318
reporting-legacy-apimojaloop2.2.01 of 1See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.23.1

Open the chart page →

1,948
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.23.1

Open the chart page →

2,457
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.23.1

Open the chart page →

6,684
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
mysql2@3.14.1
3.23.1

Open the chart page →

4,960
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
mysql2@3.11.5
3.23.1

Open the chart page →

30,028
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.23.1

Open the chart page →

27,465
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
mysql2@3.11.4
3.23.1

Open the chart page →

4,219
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.23.1

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.23.1

Open the chart page →

28,484
radio-dixitalpvillaverdeVerified publisher1.6.01 of 1See more

radio-dixital pvillaverde 1.6.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
pvillaverde/radio_dixital:1.5.0326a793e509f
mysql2@3.9.8
3.23.1

Open the chart page →

415
coolifyquench-coolifyVerified publisher0.0.171 of 4See more

coolify quench-coolify 0.0.17

1 of the 4 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
mysql2@3.9.8
3.23.1

Open the chart page →

433
coolify-realtimequench-coolify-realtimeVerified publisher0.0.71 of 1See more

coolify-realtime quench-coolify-realtime 0.0.7

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
mysql2@3.9.8
3.23.1

Open the chart page →

306
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.23.1

Open the chart page →

6,282
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
mysql2@3.11.5
3.23.1

Open the chart page →

30,219
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.23.1

Open the chart page →

4,744
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.23.1

Open the chart page →

3,118
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
mysql2@3.22.2
3.23.1

Open the chart page →

2,133
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.23.1

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry GHSA-rgwj-5xj2-c3m3.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.23.1

Open the chart page →

1,925

Container images carrying it

90 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.23.1
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
mysql2@3.11.5
3.23.1
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.23.1
1
louislam/uptime-kuma:13d632903e6af
mysql2@3.9.9
3.23.1
1
louislam/uptime-kuma:2.5.33e24e96c89ef
mysql2@3.11.5
3.23.1
1
louislam/uptime-kuma:2.0.24c364ef96aad
mysql2@3.11.5
3.23.1
1
louislam/uptime-kuma:2.4.091e963bfda56
mysql2@3.11.5
3.23.1
1
louislam/uptime-kuma:1.23.1396510915e6be
mysql2@3.9.7
3.23.1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
mysql2@3.11.5
3.23.1
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
mysql2@3.9.6
3.23.1
1
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.23.1
1
n8nio/n8n:2.25.7761374d4eb84
mysql2@3.17.0
3.23.1
1
n8nio/n8n:1.86.08b39ed5a2de9
mysql2@3.11.0
3.23.1
1
n8nio/n8n:0.212.0a9195bc499a3
mysql2@2.3.3
3.23.1
1
n8nio/n8n:1.33.1dd171d45102a
mysql2@3.9.2
3.23.1
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
mysql2@3.15.3
3.23.1
1
nocodb/nocodb:0.258.06779a4ddedf2
mysql2@3.11.4
3.23.1
1
nocodb/nocodb:0.301.5d9516f0bf546
mysql2@3.20.0
3.23.1
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.23.1
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
mysql2@2.3.0
3.23.1
1
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.23.1
1
pvillaverde/radio_dixital:1.5.0326a793e509f
mysql2@3.9.8
3.23.1
1
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.23.1
1
rocketadmin/rocketadmin:1.17.710955ef540b9
mysql2@3.22.1
3.23.1
1
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.23.1
1
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.23.1
1
veecode/devportalc443520aebf7
mysql2@3.22.5
3.23.1
1
zooz/predator:1.6f491d1f7a865
mysql2@2.2.5
3.23.1
1
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
mysql2@3.15.3
3.23.1
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
mysql2@2.2.5
3.23.1
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.23.1
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
mysql2@3.12.0
3.23.1
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:maindd991bafa85e
mysql2@3.22.5
3.23.1
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
mysql2@3.15.3
3.23.1
1
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
mysql2@3.15.3
3.23.1
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.23.1
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
mysql2@3.22.0
3.23.1
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
mysql2@3.18.2
3.23.1
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
mysql2@3.22.0
3.23.1
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
mysql2@3.6.1
3.23.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.