StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
zod@3.25.76
4.6.6

Open the chart page →

1,888
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
zod@3.25.76
4.6.6

Open the chart page →

2,762
backstagebackstageOfficialVerified publisher2.10.21 of 1See more

backstage backstage 2.10.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/backstage/backstage:latest68f2025a3f27
zod@4.6.5
4.6.6

Open the chart page →

1,490
rocketchatrocketchat-server7.1.04 of 12See more

rocketchat rocketchat-server 7.1.0

4 of the 12 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rocketchat/account-service:8.6.144af8ac4e711
zod@4.3.6
4.6.6
rocketchat/authorization-service:8.6.16bc18fb5d0e5
zod@4.3.6
4.6.6
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
zod@4.3.6
4.6.6
rocketchat/presence-service:8.6.1c1170bdfe797
zod@4.3.6
4.6.6

Open the chart page →

17,203
penpotpenpotOfficialVerified publisher1.11.42 of 5See more

penpot penpot 1.11.4

2 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
penpotapp/admin-console:2.18.45935b5adbf33
zod@4.6.5
4.6.6
penpotapp/mcp:2.18.41d6878c698af
zod@4.4.3
4.6.6

Open the chart page →

5,188
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
zod@3.25.76
4.6.6

Open the chart page →

14,099
oneuptimeoneuptimeOfficialVerified publisher14.0.873 of 7See more

oneuptime oneuptime 14.0.87

3 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
oneuptime/nginx:release64cc9c60a76a
zod@3.25.76
4.6.6
oneuptime/probe:releasedd75b4631455
zod@3.25.76
4.6.6
oneuptime/runner:releasea99da95a0490
zod@3.25.76
4.6.6

Open the chart page →

9,838
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zod@3.25.76
4.6.6

Open the chart page →

7,051
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
zod@3.23.8
4.6.6

Open the chart page →

6,590
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
zod@3.21.4
4.6.6

Open the chart page →

5,714
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:latest27602401178d
zod@4.3.6
4.6.6

Open the chart page →

3,746
openclawopenclawVerified publisher1.118.22 of 2See more

openclaw openclaw 1.118.2

2 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
zod@3.25.76
4.6.6
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.2d7e816b5e07d
zod@4.6.5
4.6.6

Open the chart page →

3,570
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
zod@4.3.6
4.6.6
budibase/worker:3.41.3de5e2e560ce8
zod@4.3.6
4.6.6

Open the chart page →

12,484
krokicowboysysopVerified publisher6.2.04 of 5See more

kroki cowboysysop 6.2.0

4 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
yuzutech/kroki-bpmn:0.33.07518c2903611
zod@3.25.76
4.6.6
yuzutech/kroki-diagramsnet:0.33.0896d00cf4709
zod@3.25.76
4.6.6
yuzutech/kroki-excalidraw:0.33.0f6ed8589e7f5
zod@3.25.76
4.6.6
yuzutech/kroki-mermaid:0.33.02fd07c6ef9ef
zod@3.25.76
4.6.6

Open the chart page →

2,970
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
zod@3.22.4
4.6.6

Open the chart page →

6,324
n8nhelmforgeVerified publisher2.1.82 of 2See more

n8n helmforge 2.1.8

2 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.44.4c72fa9f1bd9b
zod@3.25.76
4.6.6
n8nio/runners:2.44.4f95ccf564f3b
zod@3.25.76
4.6.6

Open the chart page →

1,358
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
zod@3.21.4
4.6.6

Open the chart page →

3,394
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
zod@4.3.6
4.6.6

Open the chart page →

4,969
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
zod@3.25.76
4.6.6

Open the chart page →

2,297
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
zod@3.20.6
4.6.6

Open the chart page →

15,189
karakeephelmforgeVerified publisher1.2.112 of 3See more

karakeep helmforge 1.2.11

2 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
zod@3.25.76
4.6.6
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
zod@4.3.6
4.6.6

Open the chart page →

11,431
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
zod@3.24.2
4.6.6

Open the chart page →

3,520
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
zod@3.24.1
4.6.6

Open the chart page →

10,534
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
zod@4.4.3
4.6.6

Open the chart page →

1,366
ghostcloudpirates-ghostVerified publisher0.20.321 of 3See more

ghost cloudpirates-ghost 0.20.32

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.72.0c0d83a8d4522
zod@4.6.5
4.6.6

Open the chart page →

9,293
cosmocosmo-platformOfficialVerified publisher0.22.12 of 10See more

cosmo cosmo-platform 0.22.1

2 of the 10 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
zod@3.24.2
4.6.6
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
zod@3.24.2
4.6.6

Open the chart page →

94,494
defectdojodefectdojo1.9.601 of 4See more

defectdojo defectdojo 1.9.60

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
defectdojo/defectdojo-nginx:3.4.2023bca07c2050f
zod@4.5.4
4.6.6

Open the chart page →

2,104
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher2.0.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
zod@4.6.5
4.6.6

Open the chart page →

1,792
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

12,313
hermes-agenthermes-agentVerified publisher1.22.01 of 1See more

hermes-agent hermes-agent 1.22.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v0.22.59c5561579f3f
zod@4.5.4
4.6.6

Open the chart page →

4,519
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
zod@3.20.6
4.6.6

Open the chart page →

2,985
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
journeyapps/powersync-service:latest15b8e4dbbab1
zod@3.23.8
4.6.6

Open the chart page →

9,774
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
zod@3.25.76
4.6.6

Open the chart page →

5,816
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
zod@3.25.76
4.6.6

Open the chart page →

1,068
agentareaagentareaVerified publisher0.0.291 of 17See more

agentarea agentarea 0.0.29

1 of the 17 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-base:0.1.18b80f30570ff
zod@4.6.5
4.6.6

Open the chart page →

13,394
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
zod@4.4.3
4.6.6

Open the chart page →

8,783
seerrbdclark-helm-chartsVerified publisher0.1.61 of 1See more

seerr bdclark-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
zod@4.3.6
4.6.6

Open the chart page →

2,472
betterdb-monitorbetterdb-monitorOfficialVerified publisher0.51.11 of 1See more

betterdb-monitor betterdb-monitor 0.51.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
betterdb/monitor:0.51.1-no-aic4910692b3fc
zod@4.3.6
4.6.6

Open the chart page →

434
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
zod@4.1.12
4.6.6

Open the chart page →

10,189
domain-lockerdomain-locker0.3.51 of 2See more

domain-locker domain-locker 0.3.5

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
lissy93/domain-locker:latest830bc2978462
zod@4.4.3
4.6.6

Open the chart page →

1,222
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
zod@3.25.67
4.6.6

Open the chart page →

2,049
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
zod@3.25.76
4.6.6

Open the chart page →

3,863
gorules-brmsgorulesVerified publisher1.18.11 of 1See more

gorules-brms gorules 1.18.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
gorules/brms:latest23b5efdea938
zod@4.3.6
4.6.6

Open the chart page →

336
ghostgroundhog2k0.212.181 of 1See more

ghost groundhog2k 0.212.18

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
zod@4.6.5
4.6.6

Open the chart page →

2,159
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
zod@4.1.12
4.6.6

Open the chart page →

1,554
immichimmich-helmVerified publisher0.5.11 of 4See more

immich immich-helm 0.5.1

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
zod@4.4.3
4.6.6

Open the chart page →

10,531
n8nklicktippVerified publisher1.12.01 of 1See more

n8n klicktipp 1.12.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.45.3bf88c3783fc4
zod@3.25.76
4.6.6

Open the chart page →

577
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latesta3a8606cd9b5
zod@3.22.4
4.6.6

Open the chart page →

4,094
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
litlyx/litlyx-dashboard:lateste64ff2d52385
zod@3.25.76
4.6.6

Open the chart page →

9,995
plane-enterprisemakeplaneOfficialVerified publisher3.10.123 of 13See more

plane-enterprise makeplane 3.10.12

3 of the 13 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.3fab034a2be8c
zod@4.4.3
4.6.6
makeplane/silo-commercial:v3.3.312c33418c1ec
zod@4.4.3
4.6.6
makeplane/space-commercial:v3.3.3c4a6236c4080
zod@3.25.76
4.6.6

Open the chart page →

7,782

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
zod@4.3.6
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
zod@3.24.2
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
zod@3.25.76
4.6.6
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
zod@3.25.76
4.6.6
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
zod@3.22.4
4.6.6
1
ghcr.io/microboxlabs/miot-dashboard-server:latest1927998c0131
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
zod@4.6.5
4.6.6
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6
1
ghcr.io/quenchworks/images/code-server16b79d479a4d
zod@4.4.3
4.6.6
1
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
zod@3.22.5
4.6.6
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
zod@4.5.4
4.6.6
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
zod@3.20.6
4.6.6
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
zod@4.3.6
4.6.6
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
zod@4.6.5
4.6.6
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
zod@3.24.1
4.6.6
1
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6
1
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
zod@3.25.76
4.6.6
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
zod@3.24.2
4.6.6
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
zod@3.24.2
4.6.6
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
zod@3.25.67
4.6.6
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
zod@3.25.76
4.6.6
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6
1
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
zod@4.3.6
4.6.6
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.2d7e816b5e07d
zod@4.6.5
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.