StackRadar

GHSA-wjfc-pgfp-pv9c

Medium

Advisory

Published 21 Apr 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
14
of 17,781 indexed, latest versions
Container images
13
deployed by those charts
Fix available
1 of 1
affected package

Improper Input Validation in nyholm/psr7

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 13 images.

Affected packageAffected versionsFixed inImages
nyholm/psr7composer1.2.1, 1.4.0, 1.4.1, 1.5.0+1 more1.6.113
OSV records
GHSA-wjfc-pgfp-pv9c

Charts affected

14 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
nyholm/psr7@1.5.1
1.6.1

Open the chart page →

18,509
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
nyholm/psr7@1.5.0
1.6.1

Open the chart page →

2,076
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
nyholm/psr7@1.4.1
1.6.1

Open the chart page →

2,096
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
nyholm/psr7@1.4.1
1.6.1

Open the chart page →

3,646
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
nyholm/psr7@1.4.1
1.6.1

Open the chart page →

5,293
ldap-account-managergabibbo970.2.11 of 1See more

ldap-account-manager gabibbo97 0.2.1

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:7.295533a96a4c1
nyholm/psr7@1.2.1
1.6.1

Open the chart page →

2,404
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
nyholm/psr7@1.5.1
1.6.1

Open the chart page →

4,788
lycheegeek-cookbookVerified publisher6.4.21 of 1See more

lychee geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
nyholm/psr7@1.4.0
1.6.1

Open the chart page →

601
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
nyholm/psr7@1.4.1
1.6.1

Open the chart page →

8,392
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
nyholm/psr7@1.4.1
1.6.1

Open the chart page →

5,293
firefly-iiiphntom0.2.101 of 2See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
nyholm/psr7@1.5.0
1.6.1

Open the chart page →

1,813
shopwarerobjuz2.0.01 of 6See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
shyim/shopware:6.4.6.0a951c0e6b836
nyholm/psr7@1.4.0
1.6.1

Open the chart page →

2,972
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
nyholm/psr7@1.5.0
1.6.1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry GHSA-wjfc-pgfp-pv9c.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
nyholm/psr7@1.4.1
1.6.1

Open the chart page →

2,132

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ldapaccountmanager/lam:8.0.1d46cf25d1dda
nyholm/psr7@1.4.1
1.6.1
2
anonaddy/anonaddy:0.12.3957a95565166
nyholm/psr7@1.5.1
1.6.1
1
fireflyiii/core:version-5.6.142f4283bd0cf7
nyholm/psr7@1.5.0
1.6.1
1
ldapaccountmanager/lam:7.295533a96a4c1
nyholm/psr7@1.2.1
1.6.1
1
library/monica:3.7.0-apacheceb1ba4196ab
nyholm/psr7@1.4.1
1.6.1
1
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
nyholm/psr7@1.4.0
1.6.1
1
openemr/openemr:6.1.089eaa6d9a4e3
nyholm/psr7@1.4.1
1.6.1
1
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
nyholm/psr7@1.5.0
1.6.1
1
shyim/shopware:6.4.6.0a951c0e6b836
nyholm/psr7@1.4.0
1.6.1
1
snipe/snipe-it:v6.0.1455fb7636a98c
nyholm/psr7@1.5.1
1.6.1
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
nyholm/psr7@1.4.1
1.6.1
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
nyholm/psr7@1.5.0
1.6.1
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
nyholm/psr7@1.4.1
1.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.