StackRadar

GHSA-xxjr-mmjv-4gpg

Medium

Advisory

Published 21 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.016
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
472
of 17,787 indexed, latest versions
Container images
491
deployed by those charts
Fix available
3 of 3
affected packages

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`

Carried by container images the latest versions of 472 of 17,787 indexed charts deploy, on 491 images.

Affected packageAffected versionsFixed inImages
lodashnpm0.9.2, 1.0.2, 1.3.1, 2.4.1+13 more4.17.23, 4.18.0487
lodash-esnpm4.17.4, 4.17.15, 4.17.20, 4.17.21+2 more4.17.23, 4.18.0113
lodash.unsetnpm4.5.2, 4.17.15, 4.17.214.18.06
OSV records
GHSA-f23m-r3pf-42rhGHSA-xxjr-mmjv-4gpg
Also known as
CVE-2025-13465, CVE-2026-2950

Charts affected

472 by stars
ChartLatestAffected imagesRadar Score
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
lodash@4.17.21
4.17.23

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
lodash@4.17.21
4.17.23

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
lodash@4.17.21
4.17.23

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
lodash@4.17.21
4.17.23

Open the chart page →

17,411
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
lodash@4.17.21
4.17.23

Open the chart page →

3,270
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
lodash@4.17.21
4.17.23
socialmediamacroscope/smile_server:0.3.31a528c794270
lodash@4.17.21
4.17.23

Open the chart page →

109,485
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
lodash@4.17.23
4.18.0

Open the chart page →

29,687
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
lodash@4.17.23
4.18.0

Open the chart page →

3,799
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
lodash@4.17.21
4.17.23

Open the chart page →

2,919
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
lodash@4.17.21
4.17.23

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
lodash@4.17.21
4.17.23

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
lodash@4.17.21
4.17.23

Open the chart page →

13,387
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
lodash@1.3.1
4.18.0
linuxserver/codimd:latestb801bbcf6386
lodash@4.17.20
4.17.23

Open the chart page →

27,486
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
lodash@4.17.21
4.17.23

Open the chart page →

4,219
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
lodash@4.17.21
4.17.23

Open the chart page →

2,421
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
lodash@3.10.1
4.18.0

Open the chart page →

88,616
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
lodash@3.10.1
4.18.0

Open the chart page →

38,889
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
lodash@4.17.20
lodash@3.10.1
4.17.23
4.18.0

Open the chart page →

36,230
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
lodash@4.17.21
4.17.23

Open the chart page →

72,154
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
lodash@4.17.21
4.17.23

Open the chart page →

6,544
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
lodash@4.17.21
4.17.23

Open the chart page →

4,038
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
lodash@4.17.21
4.17.23

Open the chart page →

25,681
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
lodash@4.17.21
4.17.23

Open the chart page →

28,495
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
lodash@4.17.21
4.17.23

Open the chart page →

2,969
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
lodash@4.17.21
4.17.23

Open the chart page →

1,859
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
lodash@4.17.21
4.17.23

Open the chart page →

4,658
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
lodash@4.17.21
4.17.23

Open the chart page →

1,039
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
lodash@4.17.21
4.17.23

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
lodash@4.17.21
4.17.23

Open the chart page →

5,928
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
lodash@4.17.21
4.17.23

Open the chart page →

6,794
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

4,546
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
lodash@4.17.21
4.17.23

Open the chart page →

1,547
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
lodash@4.17.21
4.17.23

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
lodash@4.17.15
4.17.23

Open the chart page →

5,215
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
lodash@4.17.23
4.18.0

Open the chart page →

66,542
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
lodash@4.17.21
4.17.23

Open the chart page →

5,338
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
lodash@4.17.21
4.17.23

Open the chart page →

1,722
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

7,429
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
lodash@4.17.23
4.18.0

Open the chart page →

29,870
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
lodash@4.17.21
4.17.23
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
lodash@4.17.21
4.17.23

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
lodash@4.17.21
4.17.23

Open the chart page →

14,792
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
library/mongo-express:1.0.2-20-alpine3.191aae00775251
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

2,348
grocysarab97Verified publisher0.1.11 of 1See more

grocy sarab97 0.1.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
linuxserver/grocy:4.0.1f8f5f96b6ea8
lodash@4.17.21
4.17.23

Open the chart page →

2,448
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
lodash@4.17.21
4.17.23

Open the chart page →

4,744
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
lodash@4.17.21
4.17.23

Open the chart page →

4,559
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

5,582
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
lodash@4.17.21
4.17.23

Open the chart page →

3,119
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry GHSA-xxjr-mmjv-4gpg.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

4,431

Container images carrying it

491 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ajnart/homarr:lateste103abadfb52
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
lodash@4.17.23
4.18.0
1
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
lodash@4.17.23
4.18.0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
lodash-es@4.17.23
4.18.0
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/calesthio/crucix:latest67c5244b6acf
lodash@4.17.23
4.18.0
1
ghcr.io/cross-seed/cross-seed:6.13.7a1fed512261f
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
lodash@4.17.15
lodash@4.17.15
lodash-es@4.17.15
lodash-es@4.17.15
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
lodash@4.17.15
lodash@4.17.15
lodash-es@4.17.15
lodash-es@4.17.15
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
lodash@4.17.13
lodash@4.17.13
lodash-es@4.17.15
lodash-es@4.17.15
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
lodash@4.17.15
lodash@4.17.15
lodash-es@4.17.15
lodash-es@4.17.15
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/data-fair/metrics:0a8d40779eeae
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/data-fair/notify:3c739b74dabb0
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/data-fair/processings:15a9216989707
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
lodash@4.17.19
lodash@4.17.19
4.17.23
4.18.0
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/flaresolverr/flaresolverr:v1.2.896f8c08c0c1b
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
lodash@4.17.21
lodash@4.17.23
4.17.23
4.18.0
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
lodash@4.17.23
4.18.0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/leoquote/mergeable:latest451706815103
lodash@4.17.20
lodash@4.17.20
4.17.23
4.18.0
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
lodash@4.17.23
4.18.0
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
lodash@4.17.20
lodash@4.17.20
4.17.23
4.18.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.