StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
zod@3.24.1
4.6.6

Open the chart page →

3,397
dial-admindialVerified publisher0.20.01 of 3See more

dial-admin dial 0.20.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
zod@4.1.12
4.6.6

Open the chart page →

3,857
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
zod@3.23.8
4.6.6

Open the chart page →

5,666
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
zod@3.22.3
4.6.6

Open the chart page →

3,432
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6

Open the chart page →

5,268
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
zod@4.6.5
4.6.6

Open the chart page →

2,448
edp-installepmdedpOfficialVerified publisher3.16.01 of 7See more

edp-install epmdedp 3.16.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6

Open the chart page →

1,953
krci-portalepmdedpVerified publisher0.9.01 of 1See more

krci-portal epmdedp 0.9.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6

Open the chart page →

273
mandefactlyVerified publisher0.5.181 of 3See more

mande factly 0.5.18

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
zod@3.21.4
4.6.6

Open the chart page →

5,740
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
zod@4.3.2
4.6.6

Open the chart page →

5,649
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
zod@3.25.76
4.6.6

Open the chart page →

32,835
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
zod@4.3.2
4.6.6

Open the chart page →

3,657
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
zod@4.3.2
4.6.6

Open the chart page →

12,093
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
zod@4.3.6
4.6.6

Open the chart page →

34,763
linkwardenfmjstudios0.3.61 of 2See more

linkwarden fmjstudios 0.3.6

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6

Open the chart page →

3,970
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
zod@3.23.8
4.6.6

Open the chart page →

8,072
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

2,998
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

2,998
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
zod@3.24.2
4.6.6

Open the chart page →

3,717
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6

Open the chart page →

8,462
affinehelmforgeVerified publisher1.0.51 of 3See more

affine helmforge 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6

Open the chart page →

4,913
appwritehelmforgeVerified publisher2.0.71 of 5See more

appwrite helmforge 2.0.7

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
zod@4.1.11
4.6.6

Open the chart page →

4,813
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
zod@3.25.76
4.6.6

Open the chart page →

7,111
bytestashhelmforgeVerified publisher1.0.41 of 1See more

bytestash helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
zod@3.25.76
4.6.6

Open the chart page →

59
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
zod@3.25.76
4.6.6

Open the chart page →

2,196
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
zod@4.6.5
4.6.6

Open the chart page →

3,067
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
zod@4.6.5
4.6.6

Open the chart page →

5,372
hermes-agenthelmforgeVerified publisher1.0.21 of 1See more

hermes-agent helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zod@4.4.3
4.6.6

Open the chart page →

8,093
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6

Open the chart page →

13,985
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
zod@3.25.76
4.6.6

Open the chart page →

70,650
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6

Open the chart page →

3,778
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
zod@4.6.1
4.6.6

Open the chart page →

4,422
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
zod@4.3.6
4.6.6

Open the chart page →

7,473
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
zod@4.4.3
4.6.6

Open the chart page →

2,761
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.49.080e1b33b0b4b
zod@4.1.11
4.6.6

Open the chart page →

3,146
self-learning-platformhelm-self-learning-platformVerified publisher1.1.21 of 1See more

self-learning-platform helm-self-learning-platform 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
zod@4.6.5
4.6.6

Open the chart page →

757
browserlessicoretechVerified publisher0.18.41 of 1See more

browserless icoretech 0.18.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
zod@4.6.5
4.6.6

Open the chart page →

1,284
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4048b1ca07690
zod@3.25.76
4.6.6

Open the chart page →

9,661
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
zod@3.25.76
4.6.6

Open the chart page →

2,830
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
zod@3.25.76
4.6.6

Open the chart page →

2,830
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
zod@3.20.6
4.6.6

Open the chart page →

6,040
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nocodb/nocodb:lateste8fee91b205b
zod@3.25.76
4.6.6

Open the chart page →

257
n8njanip81-helm-chartsVerified publisher0.1.51 of 1See more

n8n janip81-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
zod@3.24.1
4.6.6

Open the chart page →

7,318
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
moreillon/group-manager:latest3caa8f710ee0
zod@4.3.6
4.6.6

Open the chart page →

320,051
juice-shopjuice-shop5.9.01 of 1See more

juice-shop juice-shop 5.9.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
bkimminich/juice-shop:v20.2.08739101ade29
zod@4.4.3
4.6.6

Open the chart page →

2,077
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
zod@4.1.12
4.6.6

Open the chart page →

4,468
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
zod@4.1.13
4.6.6

Open the chart page →

3,968
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
zod@3.25.76
4.6.6

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
zod@4.3.6
4.6.6

Open the chart page →

2,472
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
zod@3.21.4
4.6.6

Open the chart page →

2,893

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fonoster/routr-pgdata:2.18.0f6d3f3dbaed9
zod@3.25.76
4.6.6
1
fonoster/routr-pgdata-migrations:2.18.0af1e3b37076b
zod@3.25.76
4.6.6
1
fosrl/pangolin:1.13.0c32ad797ab96
zod@4.1.13
4.6.6
1
ghostfolio/ghostfolio:3.88.0256c524a6116
zod@4.6.5
4.6.6
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
zod@3.25.76
4.6.6
1
gorules/brms:latest23b5efdea938
zod@4.3.6
4.6.6
1
growthbook/growthbook:5.1.0c8a124f55dca
zod@4.1.12
4.6.6
1
growthbook/growthbook:latestdca716a7bf47
zod@4.1.12
4.6.6
1
haohanyang/compass-web:0.5.054f2112602ee
zod@3.25.76
4.6.6
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
zod@3.25.76
4.6.6
1
helmforge/strapi-base:5.52.25a6c2c449840
zod@4.4.3
4.6.6
1
infisical/infisical:v0.166.8bb8352b71cea
zod@3.25.76
4.6.6
1
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
zod@3.24.2
4.6.6
1
journeyapps/powersync-service:latest15b8e4dbbab1
zod@3.23.8
4.6.6
1
kyso/kyso-front:lateste52595c5c16f
zod@3.21.4
4.6.6
1
library/ghost:6.41.129773d6be407
zod@4.1.12
4.6.6
1
library/ghost:6.71.0-alpine8e07c5ec63d9
zod@3.25.76
4.6.6
1
library/ghost:6.72.0c0d83a8d4522
zod@4.6.5
4.6.6
1
library/ghost:6.69.0-alpine3.23db4c56c196d6
zod@3.25.76
4.6.6
1
library/kibana:8.19.224116dd6a5838
zod@3.25.76
4.6.6
1
linuxserver/overseerr:1.35.06108ed066d4a
zod@3.20.6
4.6.6
1
lissy93/domain-locker:latest830bc2978462
zod@4.4.3
4.6.6
1
lissy93/web-check:latest5e4feb4acbd5
zod@3.25.76
4.6.6
1
litlyx/litlyx-dashboard:lateste64ff2d52385
zod@3.25.76
4.6.6
1
louislam/its-mytabs:1.7.02e478d3170bd
zod@4.1.13
4.6.6
1
makeplane/live-commercial:v3.3.3fab034a2be8c
zod@4.4.3
4.6.6
1
makeplane/silo-commercial:v3.3.312c33418c1ec
zod@4.4.3
4.6.6
1
makeplane/space-commercial:v3.3.3c4a6236c4080
zod@3.25.76
4.6.6
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
zod@3.19.0
4.6.6
1
mcp/kubernetes:latest5ffbf7f0a8aa
zod@3.25.76
4.6.6
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
zod@3.22.2
4.6.6
1
moreillon/group-manager:latest3caa8f710ee0
zod@4.3.6
4.6.6
1
n8nio/n8n:2.25.7761374d4eb84
zod@3.25.67
4.6.6
1
n8nio/n8n:2.41.687e0bab2c931
zod@3.25.76
4.6.6
1
n8nio/n8n:1.86.08b39ed5a2de9
zod@3.24.1
4.6.6
1
n8nio/n8n:2.45.3bf88c3783fc4
zod@3.25.76
4.6.6
1
n8nio/n8n:2.44.4c72fa9f1bd9b
zod@3.25.76
4.6.6
1
n8nio/n8n:2.36.8cfe2704ff858
zod@3.25.76
4.6.6
1
n8nio/n8n:1.33.1dd171d45102a
zod@3.22.4
4.6.6
1
n8nio/n8n:1.115.1ed16e560c40e
zod@3.25.67
4.6.6
1
n8nio/runners:2.44.4f95ccf564f3b
zod@3.25.76
4.6.6
1
nocodb/nocodb:0.301.5d9516f0bf546
zod@3.25.76
4.6.6
1
nocodb/nocodb:lateste8fee91b205b
zod@3.25.76
4.6.6
1
nousresearch/hermes-agent:v0.22.59c5561579f3f
zod@4.5.4
4.6.6
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
zod@4.4.3
4.6.6
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zod@4.4.3
4.6.6
1
oneuptime/nginx:release64cc9c60a76a
zod@3.25.76
4.6.6
1
oneuptime/probe:releasedd75b4631455
zod@3.25.76
4.6.6
1
oneuptime/runner:releasea99da95a0490
zod@3.25.76
4.6.6
1
opensign/opensign0ebc230eed21
zod@3.25.76
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.