StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
zod@3.25.67
4.6.6

Open the chart page →

4,424
observability-mcpobservability-mcpOfficialVerified publisher2.9.151 of 2See more

observability-mcp observability-mcp 2.9.15

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6

Open the chart page →

68
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
growthbook/growthbook:latestdca716a7bf47
zod@4.1.12
4.6.6

Open the chart page →

1,642
openclawopenclaw-helm-chartVerified publisher1.0.701 of 3See more

openclaw openclaw-helm-chart 1.0.70

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.10.67dbff0fe5f53
zod@4.6.5
4.6.6

Open the chart page →

2,448
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
zod@3.25.76
4.6.6

Open the chart page →

96,248
preparrpreparr0.19.101 of 6See more

preparr preparr 0.19.10

1 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6

Open the chart page →

1,200
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
zod@4.4.3
4.6.6

Open the chart page →

27,427
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
zod@3.24.2
4.6.6

Open the chart page →

3,401
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6

Open the chart page →

157,255
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
zod@4.4.3
4.6.6

Open the chart page →

3,170
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6

Open the chart page →

6,484
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
zod@4.4.3
4.6.6

Open the chart page →

1,366
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
zod@3.24.1
4.6.6
speckle/speckle-preview-service:2.26.3092384dba45d
zod@3.23.8
4.6.6
speckle/speckle-server:2.26.379f14a2bf931
zod@3.24.1
4.6.6
speckle/speckle-webhook-service:2.26.3c58eb372c488
zod@3.24.1
4.6.6

Open the chart page →

11,864
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
zod@3.24.4
4.6.6

Open the chart page →

17,213
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
zod@3.25.76
4.6.6

Open the chart page →

56,496
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6

Open the chart page →

87,695
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6

Open the chart page →

6,239
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
zod@3.25.76
4.6.6
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
zod@4.3.6
4.6.6

Open the chart page →

4,558
activepiecesadnoctemVerified publisher0.7.21 of 1See more

activepieces adnoctem 0.7.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
activepieces/activepieces:0.92.326daa5e1807f
zod@4.6.5
4.6.6

Open the chart page →

2,151
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
zod@3.25.76
4.6.6

Open the chart page →

1,670
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6

Open the chart page →

5,364
outlineadnoctemVerified publisher0.1.31 of 1See more

outline adnoctem 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
outlinewiki/outline:1.11.008ee9ffdb847
zod@4.5.4
4.6.6

Open the chart page →

1,757
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
zod@3.25.76
4.6.6

Open the chart page →

1,589
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

14,725
akto-hybrid-redactakto1.44.121 of 5See more

akto-hybrid-redact akto 1.44.12

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

6,582
akto-mini-testingakto1.47.01 of 5See more

akto-mini-testing akto 1.47.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6

Open the chart page →

5,663
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

7,716
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
zod@3.24.1
4.6.6

Open the chart page →

6,580
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
zod@4.6.5
4.6.6

Open the chart page →

1,348
cross-seedalekcVerified publisher8.0.01 of 1See more

cross-seed alekc 8.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.99279fa3b4c6f
zod@3.22.4
4.6.6

Open the chart page →

286
excalidashalekcVerified publisher2.0.11 of 2See more

excalidash alekc 2.0.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
zod@4.1.12
4.6.6

Open the chart page →

83
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
zod@3.20.6
4.6.6

Open the chart page →

3,756
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
zod@3.23.8
4.6.6

Open the chart page →

6,037
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
zod@3.25.76
4.6.6

Open the chart page →

2,903
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6

Open the chart page →

8,756
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
zod@3.20.6
4.6.6

Open the chart page →

3,503
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
zod@4.6.5
4.6.6

Open the chart page →

2,496
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6

Open the chart page →

1,622
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6

Open the chart page →

1,622
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.69.0-alpine3.23db4c56c196d6
zod@3.25.76
4.6.6

Open the chart page →

1,377
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
zod@3.25.76
4.6.6

Open the chart page →

2,375
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
zod@3.24.2
4.6.6

Open the chart page →

3,514
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
zod@3.25.76
4.6.6
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
zod@3.25.76
4.6.6

Open the chart page →

23,504
codiac-cluster-agent-chartcodiac-cluster-agent1.0.381 of 1See more

codiac-cluster-agent-chart codiac-cluster-agent 1.0.38

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
zod@3.25.76
4.6.6

Open the chart page →

1,856
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6

Open the chart page →

33,648
decisionrules-aksdecisionrules-aksOfficialVerified publisher0.3.01 of 2See more

decisionrules-aks decisionrules-aks 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-eksdecisionrules-eksOfficialVerified publisher0.4.01 of 2See more

decisionrules-eks decisionrules-eks 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-ingressdecisionrules-ingressOfficialVerified publisher0.3.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-ocpdecisionrules-ocpOfficialVerified publisher0.2.11 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
zod@4.4.3
4.6.6

Open the chart page →

2,201
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
zod@3.21.4
4.6.6

Open the chart page →

2,086

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fonoster/routr-pgdata:2.18.0f6d3f3dbaed9
zod@3.25.76
4.6.6
1
fonoster/routr-pgdata-migrations:2.18.0af1e3b37076b
zod@3.25.76
4.6.6
1
fosrl/pangolin:1.13.0c32ad797ab96
zod@4.1.13
4.6.6
1
ghostfolio/ghostfolio:3.88.0256c524a6116
zod@4.6.5
4.6.6
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
zod@3.25.76
4.6.6
1
gorules/brms:latest23b5efdea938
zod@4.3.6
4.6.6
1
growthbook/growthbook:5.1.0c8a124f55dca
zod@4.1.12
4.6.6
1
growthbook/growthbook:latestdca716a7bf47
zod@4.1.12
4.6.6
1
haohanyang/compass-web:0.5.054f2112602ee
zod@3.25.76
4.6.6
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
zod@3.25.76
4.6.6
1
helmforge/strapi-base:5.52.25a6c2c449840
zod@4.4.3
4.6.6
1
infisical/infisical:v0.166.8bb8352b71cea
zod@3.25.76
4.6.6
1
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
zod@3.24.2
4.6.6
1
journeyapps/powersync-service:latest15b8e4dbbab1
zod@3.23.8
4.6.6
1
kyso/kyso-front:lateste52595c5c16f
zod@3.21.4
4.6.6
1
library/ghost:6.41.129773d6be407
zod@4.1.12
4.6.6
1
library/ghost:6.71.0-alpine8e07c5ec63d9
zod@3.25.76
4.6.6
1
library/ghost:6.72.0c0d83a8d4522
zod@4.6.5
4.6.6
1
library/ghost:6.69.0-alpine3.23db4c56c196d6
zod@3.25.76
4.6.6
1
library/kibana:8.19.224116dd6a5838
zod@3.25.76
4.6.6
1
linuxserver/overseerr:1.35.06108ed066d4a
zod@3.20.6
4.6.6
1
lissy93/domain-locker:latest830bc2978462
zod@4.4.3
4.6.6
1
lissy93/web-check:latest5e4feb4acbd5
zod@3.25.76
4.6.6
1
litlyx/litlyx-dashboard:lateste64ff2d52385
zod@3.25.76
4.6.6
1
louislam/its-mytabs:1.7.02e478d3170bd
zod@4.1.13
4.6.6
1
makeplane/live-commercial:v3.3.3fab034a2be8c
zod@4.4.3
4.6.6
1
makeplane/silo-commercial:v3.3.312c33418c1ec
zod@4.4.3
4.6.6
1
makeplane/space-commercial:v3.3.3c4a6236c4080
zod@3.25.76
4.6.6
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
zod@3.19.0
4.6.6
1
mcp/kubernetes:latest5ffbf7f0a8aa
zod@3.25.76
4.6.6
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
zod@3.22.2
4.6.6
1
moreillon/group-manager:latest3caa8f710ee0
zod@4.3.6
4.6.6
1
n8nio/n8n:2.25.7761374d4eb84
zod@3.25.67
4.6.6
1
n8nio/n8n:2.41.687e0bab2c931
zod@3.25.76
4.6.6
1
n8nio/n8n:1.86.08b39ed5a2de9
zod@3.24.1
4.6.6
1
n8nio/n8n:2.45.3bf88c3783fc4
zod@3.25.76
4.6.6
1
n8nio/n8n:2.44.4c72fa9f1bd9b
zod@3.25.76
4.6.6
1
n8nio/n8n:2.36.8cfe2704ff858
zod@3.25.76
4.6.6
1
n8nio/n8n:1.33.1dd171d45102a
zod@3.22.4
4.6.6
1
n8nio/n8n:1.115.1ed16e560c40e
zod@3.25.67
4.6.6
1
n8nio/runners:2.44.4f95ccf564f3b
zod@3.25.76
4.6.6
1
nocodb/nocodb:0.301.5d9516f0bf546
zod@3.25.76
4.6.6
1
nocodb/nocodb:lateste8fee91b205b
zod@3.25.76
4.6.6
1
nousresearch/hermes-agent:v0.22.59c5561579f3f
zod@4.5.4
4.6.6
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
zod@4.4.3
4.6.6
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zod@4.4.3
4.6.6
1
oneuptime/nginx:release64cc9c60a76a
zod@3.25.76
4.6.6
1
oneuptime/probe:releasedd75b4631455
zod@3.25.76
4.6.6
1
oneuptime/runner:releasea99da95a0490
zod@3.25.76
4.6.6
1
opensign/opensign0ebc230eed21
zod@3.25.76
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.