StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
supabase/studio:latestd878dcd9dba7
zod@4.6.5
4.6.6

Open the chart page →

33,915
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
zod@4.1.11
4.6.6

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
zod@3.25.76
4.6.6

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
zod@4.1.12
4.6.6

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
zod@4.3.6
4.6.6

Open the chart page →

2,075
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
zod@3.25.76
4.6.6

Open the chart page →

5,216
devportalveecode-platform-nextVerified publisher1.1.21 of 1See more

devportal veecode-platform-next 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned726cc70543dd
zod@4.6.5
4.6.6

Open the chart page →

1,769
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
zod@3.22.4
4.6.6

Open the chart page →

3,564
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
zod@3.25.76
4.6.6

Open the chart page →

5,455
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
zod@4.3.6
4.6.6

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
zod@3.25.67
4.6.6

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
zod@4.1.11
4.6.6

Open the chart page →

72,567
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6

Open the chart page →

4,319
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
zod@3.25.76
4.6.6

Open the chart page →

7,567
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
zod@3.25.76
4.6.6

Open the chart page →

1,844
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
zod@3.23.8
4.6.6

Open the chart page →

16,335
workadventure-adminwork-adventure1.0.0-21-33 of 14See more

workadventure-admin work-adventure 1.0.0-21-3

3 of the 14 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:helm-chart53a30c962ce9
zod@3.20.2
4.6.6
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
zod@3.20.2
4.6.6
thecodingmachine/workadventure-play:helm-chartdf31006cc4ce
zod@3.20.2
4.6.6

Open the chart page →

20,885
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
zod@3.20.2
4.6.6
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
zod@3.20.2
4.6.6
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
zod@3.20.2
4.6.6

Open the chart page →

21,555

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
zod@3.21.4
4.6.6
1
outlinewiki/outline:1.11.008ee9ffdb847
zod@4.5.4
4.6.6
1
outlinewiki/outline:0.82.0494dfb9249a6
zod@3.23.8
4.6.6
1
penpotapp/admin-console:2.18.0:2.18.1:2.18.2:2.18.3:2.18.45935b5adbf33
zod@4.6.5
4.6.6
1
penpotapp/mcp:2.18.41d6878c698af
zod@4.4.3
4.6.6
1
pvillaverde/radio_dixital:1.5.0326a793e509f
zod@3.23.8
4.6.6
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
zod@3.24.1
4.6.6
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
zod@4.3.6
4.6.6
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
zod@4.4.3
4.6.6
1
rocketchat/account-service:8.6.144af8ac4e711
zod@4.3.6
4.6.6
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
zod@4.3.6
4.6.6
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
zod@4.3.6
4.6.6
1
rocketchat/presence-service:8.6.1c1170bdfe797
zod@4.3.6
4.6.6
1
rowflare/rowflare:0.1.09767136d308a
zod@4.6.4
4.6.6
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
zod@3.23.8
4.6.6
1
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
zod@3.24.1
4.6.6
1
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
zod@3.24.1
4.6.6
1
speckle/speckle-preview-service:2.26.3092384dba45d
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
zod@3.23.8
4.6.6
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
zod@3.23.8
4.6.6
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.26.379f14a2bf931
zod@3.24.1
4.6.6
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
zod@3.22.4
4.6.6
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
zod@3.22.4
4.6.6
1
speckle/speckle-webhook-service:2.26.3c58eb372c488
zod@3.24.1
4.6.6
1
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
zod@3.22.4
4.6.6
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
zod@3.25.76
4.6.6
1
supabase/studio:latestd878dcd9dba7
zod@4.6.5
4.6.6
1
tensorzero/ui:2026.6.0f2563d54724e
zod@3.25.76
4.6.6
1
thecodingmachine/workadventure-back:helm-chart53a30c962ce9
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
zod@3.20.2
4.6.6
1
thecodingmachine/workadventure-play:helm-chartdf31006cc4ce
zod@3.20.2
4.6.6
1
tiago2/cap:2.159f5ae4e261e
zod@3.25.67
4.6.6
1
treskon/portrait-ui:DEV-lateste7970783bc8d
zod@3.25.76
4.6.6
1
twentycrm/twenty:v2.49.080e1b33b0b4b
zod@4.1.11
4.6.6
1
twentycrm/twenty:latest91793759486e
zod@4.1.11
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.