StackRadarChart IndexLive demo

GHSA-v78c-4p63-2j6c

Medium

Advisory

Published 30 Aug 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 67; of 17,781 indexed, latest versions
Container images: 60; deployed by those charts
Fix available: 1 of 1; affected package

Cleartext Transmission of Sensitive Information in moment-timezone

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 60 images.

Affected package	Affected versions	Fixed in	Images
moment-timezonenpm	0.3.1, 0.5.13, 0.5.14, 0.5.21+7 more	0.5.35	60

OSV records: GHSA-v78c-4p63-2j6c

Charts affected

67 by stars

Chart

Latest

Affected images

Radar Score

admin-api-svcmojaloop

1 of 4 See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
mojaloop/central-ledger :v13.14.0	1abc8a7aa71c	moment-timezone@0.5.33	0.5.35

Open the chart page →

12,108

mojaloopmojaloop

1 of 6 See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
mojaloop/central-ledger :v13.14.0	1abc8a7aa71c	moment-timezone@0.5.33	0.5.35

Open the chart page →

19,226

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	moment-timezone@0.5.31	0.5.35

Open the chart page →

6,684

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	moment-timezone@0.5.32	0.5.35

Open the chart page →

27,465

flomesh-consoleopenshift

1 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	moment-timezone@0.5.33	0.5.35

Open the chart page →

9,968

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
openwhisk/alarmprovider :2.2.0	b695a6ceb406	moment-timezone@0.5.31	0.5.35

Open the chart page →

36,215

codimdphntom

1 of 3 See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
phntom/codimd :2.4.3	1b9aafbb62e6	moment-timezone@0.5.32	0.5.35

Open the chart page →

6,524

practica-helmpractica-helm

1 of 7 See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
slagattollas/server-practica :latest	6dd8ead8e2b1	moment-timezone@0.5.33	0.5.35

Open the chart page →

28,484

1 of 1 See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
gristlabs/grist :0.7.9	6e71b1914a7e	moment-timezone@0.5.21	0.5.35

Open the chart page →

5,215

hedgedocschmitzis

1 of 1 See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	moment-timezone@0.5.34	0.5.35

Open the chart page →

3,118

pwssoketi

1 of 1 See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
quay.io/soketi/pws :0.8-16-alpine	399d2e6b10ef	moment-timezone@0.5.33	0.5.35

Open the chart page →

3,228

alertmanager-to-alerta-botsomeblackmagic

1 of 1 See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
someblackmagic/alertmanager-to-alerta-bot :latest	78bf43744ea5	moment-timezone@0.5.34	0.5.35

Open the chart page →

2,121

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	moment-timezone@0.5.34	0.5.35

Open the chart page →

4,017

csmmth-charts

1 of 3 See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
catalysm/csmm :latest	f003b35f54d9	moment-timezone@0.5.34	0.5.35

Open the chart page →

3,576

node-redthl-charts

1 of 1 See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
nodered/node-red :3.0.2-18	e2632a7a35dd	moment-timezone@0.5.34	0.5.35

Open the chart page →

2,806

1 of 1 See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	moment-timezone@0.5.34	0.5.35

Open the chart page →

3,118

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-v78c-4p63-2j6c.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	moment-timezone@0.5.27	0.5.35

Open the chart page →

5,806

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
zwavejs/zwavejs2mqtt :5.0.2	15a6040fb468	moment-timezone@0.5.33	0.5.35	1
ghcr.io/advplyr/audiobookshelf :2.0.3	140aed2752c3	moment-timezone@0.5.34	0.5.35	1
ghcr.io/data-fair/simple-directory :4	38a4f32fad82	moment-timezone@0.5.34	0.5.35	1
ghcr.io/leoquote/mergeable :latest	451706815103	moment-timezone@0.5.31	0.5.35	1
ghcr.io/linuxserver/raneto :version-0.16.6	ef768f3df5d0	moment-timezone@0.5.32	0.5.35	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	moment-timezone@0.5.31	0.5.35	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	moment-timezone@0.5.34	0.5.35	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	moment-timezone@0.5.33	0.5.35	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	moment-timezone@0.5.33	0.5.35	1
quay.io/soketi/pws :0.8-16-alpine	399d2e6b10ef	moment-timezone@0.5.33	0.5.35	1