CVE-2023-54404
HighAdvisory
Published 1 Oct 2026In the index since 24 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.004
- 27th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 218
- of 18,232 indexed, latest versions
- Container images
- 237
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Zod can exhaust memory while validating oversized constrained collections
Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| zodnpm | 3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more | 4.6.6 | 237 |
- OSV records
- GHSA-mrhx-c7xc-m3w5
Charts affected
218 by stars
Container images carrying it
237 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| fonoster/ | f6d3f3dbaed9 | zod | 4.6.6 | 1 |
| fonoster/ | af1e3b37076b | zod | 4.6.6 | 1 |
| fosrl/ | c32ad797ab96 | zod | 4.6.6 | 1 |
| ghostfolio/ | 256c524a6116 | zod | 4.6.6 | 1 |
| ghostfolio/ | e3c6ab53e49b | zod | 4.6.6 | 1 |
| gorules/ | 23b5efdea938 | zod | 4.6.6 | 1 |
| growthbook/ | c8a124f55dca | zod | 4.6.6 | 1 |
| growthbook/ | dca716a7bf47 | zod | 4.6.6 | 1 |
| haohanyang/ | 54f2112602ee | zod | 4.6.6 | 1 |
| haohanyang/ | f4f8fe4e21f1 | zod | 4.6.6 | 1 |
| helmforge/ | 5a6c2c449840 | zod | 4.6.6 | 1 |
| infisical/ | bb8352b71cea | zod | 4.6.6 | 1 |
| iwakitakuma/ | fb3e81aa6528 | zod | 4.6.6 | 1 |
| journeyapps/ | 15b8e4dbbab1 | zod | 4.6.6 | 1 |
| kyso/ | e52595c5c16f | zod | 4.6.6 | 1 |
| library/ | 29773d6be407 | zod | 4.6.6 | 1 |
| library/ | 8e07c5ec63d9 | zod | 4.6.6 | 1 |
| library/ | c0d83a8d4522 | zod | 4.6.6 | 1 |
| library/ | db4c56c196d6 | zod | 4.6.6 | 1 |
| library/ | 4116dd6a5838 | zod | 4.6.6 | 1 |
| linuxserver/ | 6108ed066d4a | zod | 4.6.6 | 1 |
| lissy93/ | 830bc2978462 | zod | 4.6.6 | 1 |
| lissy93/ | 5e4feb4acbd5 | zod | 4.6.6 | 1 |
| litlyx/ | e64ff2d52385 | zod | 4.6.6 | 1 |
| louislam/ | 2e478d3170bd | zod | 4.6.6 | 1 |
| makeplane/ | fab034a2be8c | zod | 4.6.6 | 1 |
| makeplane/ | 12c33418c1ec | zod | 4.6.6 | 1 |
| makeplane/ | c4a6236c4080 | zod | 4.6.6 | 1 |
| markdegroot/ | d8445f2a0de6 | zod | 4.6.6 | 1 |
| mcp/ | 5ffbf7f0a8aa | zod | 4.6.6 | 1 |
| moonrailgun/ | b528c8f8fcc4 | zod | 4.6.6 | 1 |
| moreillon/ | 3caa8f710ee0 | zod | 4.6.6 | 1 |
| n8nio/ | 761374d4eb84 | zod | 4.6.6 | 1 |
| n8nio/ | 87e0bab2c931 | zod | 4.6.6 | 1 |
| n8nio/ | 8b39ed5a2de9 | zod | 4.6.6 | 1 |
| n8nio/ | bf88c3783fc4 | zod | 4.6.6 | 1 |
| n8nio/ | c72fa9f1bd9b | zod | 4.6.6 | 1 |
| n8nio/ | cfe2704ff858 | zod | 4.6.6 | 1 |
| n8nio/ | dd171d45102a | zod | 4.6.6 | 1 |
| n8nio/ | ed16e560c40e | zod | 4.6.6 | 1 |
| n8nio/ | f95ccf564f3b | zod | 4.6.6 | 1 |
| nocodb/ | d9516f0bf546 | zod | 4.6.6 | 1 |
| nocodb/ | e8fee91b205b | zod | 4.6.6 | 1 |
| nousresearch/ | 9c5561579f3f | zod | 4.6.6 | 1 |
| nousresearch/ | e0df6adebddf | zod | 4.6.6 | 1 |
| nousresearch/ | fca358f12efd | zod | 4.6.6 | 1 |
| oneuptime/ | 64cc9c60a76a | zod | 4.6.6 | 1 |
| oneuptime/ | dd75b4631455 | zod | 4.6.6 | 1 |
| oneuptime/ | a99da95a0490 | zod | 4.6.6 | 1 |
| opensign/ | 0ebc230eed21 | zod | 4.6.6 | 1 |