StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
zod@3.24.1
4.6.6

Open the chart page →

3,397
dial-admindialVerified publisher0.20.01 of 3See more

dial-admin dial 0.20.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
zod@4.1.12
4.6.6

Open the chart page →

3,857
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
zod@3.23.8
4.6.6

Open the chart page →

5,666
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
zod@3.22.3
4.6.6

Open the chart page →

3,432
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6

Open the chart page →

5,268
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
zod@4.6.5
4.6.6

Open the chart page →

2,448
edp-installepmdedpOfficialVerified publisher3.16.01 of 7See more

edp-install epmdedp 3.16.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6

Open the chart page →

1,953
krci-portalepmdedpVerified publisher0.9.01 of 1See more

krci-portal epmdedp 0.9.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6

Open the chart page →

273
mandefactlyVerified publisher0.5.181 of 3See more

mande factly 0.5.18

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
zod@3.21.4
4.6.6

Open the chart page →

5,740
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
zod@4.3.2
4.6.6

Open the chart page →

5,649
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
zod@3.25.76
4.6.6

Open the chart page →

32,835
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
zod@4.3.2
4.6.6

Open the chart page →

3,657
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
zod@4.3.2
4.6.6

Open the chart page →

12,093
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
zod@4.3.6
4.6.6

Open the chart page →

34,763
linkwardenfmjstudios0.3.61 of 2See more

linkwarden fmjstudios 0.3.6

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6

Open the chart page →

3,970
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
zod@3.23.8
4.6.6

Open the chart page →

8,072
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

2,998
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

2,998
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
zod@3.24.2
4.6.6

Open the chart page →

3,717
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6

Open the chart page →

8,462
affinehelmforgeVerified publisher1.0.51 of 3See more

affine helmforge 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6

Open the chart page →

4,913
appwritehelmforgeVerified publisher2.0.71 of 5See more

appwrite helmforge 2.0.7

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
zod@4.1.11
4.6.6

Open the chart page →

4,813
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
zod@3.25.76
4.6.6

Open the chart page →

7,111
bytestashhelmforgeVerified publisher1.0.41 of 1See more

bytestash helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
zod@3.25.76
4.6.6

Open the chart page →

59
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
zod@3.25.76
4.6.6

Open the chart page →

2,196
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
zod@4.6.5
4.6.6

Open the chart page →

3,067
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
zod@4.6.5
4.6.6

Open the chart page →

5,372
hermes-agenthelmforgeVerified publisher1.0.21 of 1See more

hermes-agent helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zod@4.4.3
4.6.6

Open the chart page →

8,093
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6

Open the chart page →

13,985
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
zod@3.25.76
4.6.6

Open the chart page →

70,650
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6

Open the chart page →

3,778
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
zod@4.6.1
4.6.6

Open the chart page →

4,422
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
zod@4.3.6
4.6.6

Open the chart page →

7,473
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
zod@4.4.3
4.6.6

Open the chart page →

2,761
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.49.080e1b33b0b4b
zod@4.1.11
4.6.6

Open the chart page →

3,146
self-learning-platformhelm-self-learning-platformVerified publisher1.1.21 of 1See more

self-learning-platform helm-self-learning-platform 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
zod@4.6.5
4.6.6

Open the chart page →

757
browserlessicoretechVerified publisher0.18.41 of 1See more

browserless icoretech 0.18.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
zod@4.6.5
4.6.6

Open the chart page →

1,284
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4048b1ca07690
zod@3.25.76
4.6.6

Open the chart page →

9,661
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
zod@3.25.76
4.6.6

Open the chart page →

2,830
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
zod@3.25.76
4.6.6

Open the chart page →

2,830
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
zod@3.20.6
4.6.6

Open the chart page →

6,040
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nocodb/nocodb:lateste8fee91b205b
zod@3.25.76
4.6.6

Open the chart page →

257
n8njanip81-helm-chartsVerified publisher0.1.51 of 1See more

n8n janip81-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
zod@3.24.1
4.6.6

Open the chart page →

7,318
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
moreillon/group-manager:latest3caa8f710ee0
zod@4.3.6
4.6.6

Open the chart page →

320,051
juice-shopjuice-shop5.9.01 of 1See more

juice-shop juice-shop 5.9.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
bkimminich/juice-shop:v20.2.08739101ade29
zod@4.4.3
4.6.6

Open the chart page →

2,077
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
zod@4.1.12
4.6.6

Open the chart page →

4,468
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
zod@4.1.13
4.6.6

Open the chart page →

3,968
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
zod@3.25.76
4.6.6

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
zod@4.3.6
4.6.6

Open the chart page →

2,472
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
zod@3.21.4
4.6.6

Open the chart page →

2,893

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
zod@3.21.4
4.6.6
1
outlinewiki/outline:1.11.008ee9ffdb847
zod@4.5.4
4.6.6
1
outlinewiki/outline:0.82.0494dfb9249a6
zod@3.23.8
4.6.6
1
penpotapp/admin-console:2.18.0:2.18.1:2.18.2:2.18.3:2.18.45935b5adbf33
zod@4.6.5
4.6.6
1
penpotapp/mcp:2.18.41d6878c698af
zod@4.4.3
4.6.6
1
pvillaverde/radio_dixital:1.5.0326a793e509f
zod@3.23.8
4.6.6
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
zod@3.24.1
4.6.6
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
zod@4.3.6
4.6.6
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
zod@4.4.3
4.6.6
1
rocketchat/account-service:8.6.144af8ac4e711
zod@4.3.6
4.6.6
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
zod@4.3.6
4.6.6
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
zod@4.3.6
4.6.6
1
rocketchat/presence-service:8.6.1c1170bdfe797
zod@4.3.6
4.6.6
1
rowflare/rowflare:0.1.09767136d308a
zod@4.6.4
4.6.6
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
zod@3.23.8
4.6.6
1
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
zod@3.24.1
4.6.6
1
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
zod@3.24.1
4.6.6
1
speckle/speckle-preview-service:2.26.3092384dba45d
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
zod@3.23.8
4.6.6
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.26.379f14a2bf931
zod@3.24.1
4.6.6
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
zod@3.22.4
4.6.6
1
speckle/speckle-webhook-service:2.26.3c58eb372c488
zod@3.24.1
4.6.6
1
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
zod@3.22.4
4.6.6
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
zod@3.25.76
4.6.6
1
supabase/studio:latestd878dcd9dba7
zod@4.6.5
4.6.6
1
tensorzero/ui:2026.6.0f2563d54724e
zod@3.25.76
4.6.6
1
thecodingmachine/workadventure-back:helm-chart53a30c962ce9
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-play:helm-chartdf31006cc4ce
zod@3.20.2
4.6.6
1
tiago2/cap:2.159f5ae4e261e
zod@3.25.67
4.6.6
1
treskon/portrait-ui:DEV-lateste7970783bc8d
zod@3.25.76
4.6.6
1
twentycrm/twenty:v2.49.080e1b33b0b4b
zod@4.1.11
4.6.6
1
twentycrm/twenty:latest91793759486e
zod@4.1.11
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.