StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
supabase/studio:latestd878dcd9dba7
zod@4.6.5
4.6.6

Open the chart page →

33,915
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
zod@4.1.11
4.6.6

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
zod@3.25.76
4.6.6

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
zod@4.1.12
4.6.6

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
zod@4.3.6
4.6.6

Open the chart page →

2,075
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
zod@3.25.76
4.6.6

Open the chart page →

5,216
devportalveecode-platform-nextVerified publisher1.1.21 of 1See more

devportal veecode-platform-next 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned726cc70543dd
zod@4.6.5
4.6.6

Open the chart page →

1,769
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
zod@3.22.4
4.6.6

Open the chart page →

3,564
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
zod@3.25.76
4.6.6

Open the chart page →

5,455
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
zod@4.3.6
4.6.6

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
zod@3.25.67
4.6.6

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
zod@4.1.11
4.6.6

Open the chart page →

72,567
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6

Open the chart page →

4,319
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
zod@3.25.76
4.6.6

Open the chart page →

7,567
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
zod@3.25.76
4.6.6

Open the chart page →

1,844
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
zod@3.23.8
4.6.6

Open the chart page →

16,335
workadventure-adminwork-adventure1.0.0-21-33 of 14See more

workadventure-admin work-adventure 1.0.0-21-3

3 of the 14 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:helm-chart53a30c962ce9
zod@3.20.2
4.6.6
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
zod@3.20.2
4.6.6
thecodingmachine/workadventure-play:helm-chartdf31006cc4ce
zod@3.20.2
4.6.6

Open the chart page →

20,885
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
zod@3.20.2
4.6.6
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
zod@3.20.2
4.6.6
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
zod@3.20.2
4.6.6

Open the chart page →

21,555

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
twentycrm/twenty:v2.22.0e7d9948bf284
zod@4.1.11
4.6.6
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
zod@3.25.76
4.6.6
1
veecode/devportal726cc70543dd
zod@4.6.5
4.6.6
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
zod@3.25.76
4.6.6
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
zod@3.25.76
4.6.6
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
zod@3.23.8
4.6.6
1
yuzutech/kroki-bpmn:0.33.07518c2903611
zod@3.25.76
4.6.6
1
yuzutech/kroki-diagramsnet:0.33.0896d00cf4709
zod@3.25.76
4.6.6
1
yuzutech/kroki-excalidraw:0.33.0f6ed8589e7f5
zod@3.25.76
4.6.6
1
yuzutech/kroki-mermaid:0.33.02fd07c6ef9ef
zod@3.25.76
4.6.6
1
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
zod@4.1.12
4.6.6
1
zimengxiong/excalidash-backend:0.6.529937c62fbed
zod@4.1.12
4.6.6
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
zod@3.25.76
4.6.6
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
zod@3.21.4
4.6.6
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
zod@3.21.4
4.6.6
1
ghcr.io/ajnart/homarr:lateste103abadfb52
zod@3.22.4
4.6.6
1
ghcr.io/akash-network/console-api:2.64.0ba359097329d
zod@3.23.8
4.6.6
1
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
zod@3.23.8
4.6.6
1
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
zod@3.23.8
4.6.6
1
ghcr.io/akash-network/provider-proxy:1.4.353f533d7c6f8
zod@3.23.8
4.6.6
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
zod@3.23.8
4.6.6
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
zod@4.6.1
4.6.6
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
zod@3.25.76
4.6.6
1
ghcr.io/backstage/backstage:latest68f2025a3f27
zod@4.6.5
4.6.6
1
ghcr.io/bluesky-social/pds:0.4048b1ca07690
zod@3.25.76
4.6.6
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
zod@3.25.76
4.6.6
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
zod@3.25.76
4.6.6
1
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
zod@4.6.5
4.6.6
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
zod@3.25.76
4.6.6
1
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
zod@4.6.5
4.6.6
1
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
zod@3.25.76
4.6.6
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
zod@3.25.76
4.6.6
1
ghcr.io/cameri/nostream:main5715366725fa
zod@3.25.76
4.6.6
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
zod@3.24.2
4.6.6
1
ghcr.io/colanode/server:latest7006cac874fd
zod@4.3.6
4.6.6
1
ghcr.io/cross-seed/cross-seed:6.13.99279fa3b4c6f
zod@3.22.4
4.6.6
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
zod@3.24.2
4.6.6
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
zod@3.24.2
4.6.6
1
ghcr.io/documenso/documensod9985f66c19c
zod@3.25.76
4.6.6
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
zod@3.24.2
4.6.6
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
zod@4.1.12
4.6.6
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
zod@3.25.76
4.6.6
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
zod@4.3.6
4.6.6
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
zod@3.25.76
4.6.6
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
zod@3.25.76
4.6.6
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
zod@4.3.6
4.6.6
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
zod@4.4.3
4.6.6
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
zod@4.4.3
4.6.6
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
zod@3.23.8
4.6.6
1
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
zod@3.25.76
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.