StackRadarChart IndexLive demo

GHSA-xc7v-wxcw-j472

Medium

Advisory

Published 3 Jun 2019In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 21; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

Memory Exposure in tunnel-agent

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
tunnel-agentnpm	0.2.0, 0.4.0, 0.4.1, 0.4.3	0.6.0	17

OSV records: GHSA-xc7v-wxcw-j472

Charts affected

21 by stars

Chart

Latest

Affected images

Radar Score

microcksmicrocks

0.8.0-helm-3.kube-1.17

1 of 5 See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	tunnel-agent@0.4.3	0.6.0

Open the chart page →

10,732

kongakonga

1 of 1 See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	tunnel-agent@0.4.3	0.6.0

Open the chart page →

5,209

splice-helmsplice-helm

1 of 13 See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
jupyterhub/configurable-http-proxy :3.0.0	c36cf3cc1c99	tunnel-agent@0.4.3	0.6.0

Open the chart page →

1,477

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	tunnel-agent@0.4.3	0.6.0

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	tunnel-agent@0.4.3	0.6.0

Open the chart page →

4,069

otbrcharts-derwitt-dev

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	tunnel-agent@0.4.1	0.6.0

Open the chart page →

12,779

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	tunnel-agent@0.4.1	0.6.0

Open the chart page →

27,417

webpagetest-agentcloudnativeapp

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	tunnel-agent@0.4.3	0.6.0

Open the chart page →

77,758

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	tunnel-agent@0.4.3	0.6.0

Open the chart page →

5,209

backend-servicedev-krishan-dhaka-charts

1 of 1 See more

backend-service dev-krishan-dhaka-charts 1.0.3

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
devkrishan001/backend :latest	f1c3acadeabe	tunnel-agent@0.2.0	0.6.0

Open the chart page →

1,264

logentriesfairwinds-incubator

1 of 1 See more

logentries fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
logentries/docker-logentries :0.2.1	f1f90a236998	tunnel-agent@0.4.3	0.6.0

Open the chart page →

1,597

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	tunnel-agent@0.4.0	0.6.0

Open the chart page →

5,941

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	tunnel-agent@0.4.3	0.6.0

Open the chart page →

57,669

monocularjenkins-x

1 of 4 See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	tunnel-agent@0.4.3	0.6.0

Open the chart page →

4,614

nubladolsst-sqre

1 of 5 See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	tunnel-agent@0.4.3	0.6.0

Open the chart page →

5,786

monocularmonocular

1 of 5 See more

monocular monocular 1.4.15

1 of the 5 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	tunnel-agent@0.4.3	0.6.0

Open the chart page →

7,048

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	tunnel-agent@0.4.3	0.6.0

Open the chart page →

27,465

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	tunnel-agent@0.4.1	0.6.0

Open the chart page →

36,215

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	tunnel-agent@0.4.3	0.6.0

Open the chart page →

3,638

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	tunnel-agent@0.4.3	0.6.0

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry GHSA-xc7v-wxcw-j472.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	tunnel-agent@0.4.3	0.6.0

Open the chart page →

12,460

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	tunnel-agent@0.4.3	0.6.0	3
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	tunnel-agent@0.4.3	0.6.0	2
migmartri/prerender :latest	486aacfd5aa9	tunnel-agent@0.4.3	0.6.0	2
devkrishan001/backend :latest	f1c3acadeabe	tunnel-agent@0.2.0	0.6.0	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	tunnel-agent@0.4.1	0.6.0	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	tunnel-agent@0.4.3	0.6.0	1
jupyterhub/configurable-http-proxy :3.0.0	c36cf3cc1c99	tunnel-agent@0.4.3	0.6.0	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	tunnel-agent@0.4.3	0.6.0	1
linuxserver/cloud9 :latest	45c5fe102ff3	tunnel-agent@0.4.3	0.6.0	1
logentries/docker-logentries :0.2.1	f1f90a236998	tunnel-agent@0.4.3	0.6.0	1
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	tunnel-agent@0.4.3	0.6.0	1
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	tunnel-agent@0.4.3	0.6.0	1
openthread/otbr :latest	f307f59f6432	tunnel-agent@0.4.1	0.6.0	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	tunnel-agent@0.4.1	0.6.0	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	tunnel-agent@0.4.3	0.6.0	1
wekanteam/wekan :v4.22	68a51f0327df	tunnel-agent@0.4.0	0.6.0	1
quay.io/wekan/wekan :v5.65	cb17600883a3	tunnel-agent@0.4.3	0.6.0	1