StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
zod@3.25.67
4.6.6

Open the chart page →

4,424
observability-mcpobservability-mcpOfficialVerified publisher2.9.151 of 2See more

observability-mcp observability-mcp 2.9.15

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6

Open the chart page →

68
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
growthbook/growthbook:latestdca716a7bf47
zod@4.1.12
4.6.6

Open the chart page →

1,642
openclawopenclaw-helm-chartVerified publisher1.0.701 of 3See more

openclaw openclaw-helm-chart 1.0.70

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.10.67dbff0fe5f53
zod@4.6.5
4.6.6

Open the chart page →

2,448
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
zod@3.25.76
4.6.6

Open the chart page →

96,248
preparrpreparr0.19.101 of 6See more

preparr preparr 0.19.10

1 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6

Open the chart page →

1,200
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
zod@4.4.3
4.6.6

Open the chart page →

27,427
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
zod@3.24.2
4.6.6

Open the chart page →

3,401
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6

Open the chart page →

157,255
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
zod@4.4.3
4.6.6

Open the chart page →

3,170
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6

Open the chart page →

6,484
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
zod@4.4.3
4.6.6

Open the chart page →

1,366
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
zod@3.24.1
4.6.6
speckle/speckle-preview-service:2.26.3092384dba45d
zod@3.23.8
4.6.6
speckle/speckle-server:2.26.379f14a2bf931
zod@3.24.1
4.6.6
speckle/speckle-webhook-service:2.26.3c58eb372c488
zod@3.24.1
4.6.6

Open the chart page →

11,864
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
zod@3.24.4
4.6.6

Open the chart page →

17,213
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
zod@3.25.76
4.6.6

Open the chart page →

56,496
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6

Open the chart page →

87,695
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6

Open the chart page →

6,239
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
zod@3.25.76
4.6.6
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
zod@4.3.6
4.6.6

Open the chart page →

4,558
activepiecesadnoctemVerified publisher0.7.21 of 1See more

activepieces adnoctem 0.7.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
activepieces/activepieces:0.92.326daa5e1807f
zod@4.6.5
4.6.6

Open the chart page →

2,151
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
zod@3.25.76
4.6.6

Open the chart page →

1,670
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6

Open the chart page →

5,364
outlineadnoctemVerified publisher0.1.31 of 1See more

outline adnoctem 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
outlinewiki/outline:1.11.008ee9ffdb847
zod@4.5.4
4.6.6

Open the chart page →

1,757
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
zod@3.25.76
4.6.6

Open the chart page →

1,589
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

14,725
akto-hybrid-redactakto1.44.121 of 5See more

akto-hybrid-redact akto 1.44.12

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

6,582
akto-mini-testingakto1.47.01 of 5See more

akto-mini-testing akto 1.47.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6

Open the chart page →

5,663
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

7,716
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
zod@3.24.1
4.6.6

Open the chart page →

6,580
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
zod@4.6.5
4.6.6

Open the chart page →

1,348
cross-seedalekcVerified publisher8.0.01 of 1See more

cross-seed alekc 8.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.99279fa3b4c6f
zod@3.22.4
4.6.6

Open the chart page →

286
excalidashalekcVerified publisher2.0.11 of 2See more

excalidash alekc 2.0.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
zod@4.1.12
4.6.6

Open the chart page →

83
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
zod@3.20.6
4.6.6

Open the chart page →

3,756
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
zod@3.23.8
4.6.6

Open the chart page →

6,037
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
zod@3.25.76
4.6.6

Open the chart page →

2,903
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6

Open the chart page →

8,756
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
zod@3.20.6
4.6.6

Open the chart page →

3,503
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
zod@4.6.5
4.6.6

Open the chart page →

2,496
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6

Open the chart page →

1,622
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6

Open the chart page →

1,622
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.69.0-alpine3.23db4c56c196d6
zod@3.25.76
4.6.6

Open the chart page →

1,377
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
zod@3.25.76
4.6.6

Open the chart page →

2,375
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
zod@3.24.2
4.6.6

Open the chart page →

3,514
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
zod@3.25.76
4.6.6
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
zod@3.25.76
4.6.6

Open the chart page →

23,504
codiac-cluster-agent-chartcodiac-cluster-agent1.0.381 of 1See more

codiac-cluster-agent-chart codiac-cluster-agent 1.0.38

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
zod@3.25.76
4.6.6

Open the chart page →

1,856
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6

Open the chart page →

33,648
decisionrules-aksdecisionrules-aksOfficialVerified publisher0.3.01 of 2See more

decisionrules-aks decisionrules-aks 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-eksdecisionrules-eksOfficialVerified publisher0.4.01 of 2See more

decisionrules-eks decisionrules-eks 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-ingressdecisionrules-ingressOfficialVerified publisher0.3.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-ocpdecisionrules-ocpOfficialVerified publisher0.2.11 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
zod@4.4.3
4.6.6

Open the chart page →

2,201
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
zod@3.21.4
4.6.6

Open the chart page →

2,086

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
zod@4.3.6
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
zod@3.24.2
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
zod@3.25.76
4.6.6
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
zod@3.25.76
4.6.6
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
zod@3.22.4
4.6.6
1
ghcr.io/microboxlabs/miot-dashboard-server:latest1927998c0131
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
zod@4.6.5
4.6.6
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6
1
ghcr.io/quenchworks/images/code-server16b79d479a4d
zod@4.4.3
4.6.6
1
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
zod@3.22.5
4.6.6
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
zod@4.5.4
4.6.6
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
zod@3.20.6
4.6.6
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
zod@4.3.6
4.6.6
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
zod@4.6.5
4.6.6
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
zod@3.24.1
4.6.6
1
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6
1
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
zod@3.25.76
4.6.6
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
zod@3.24.2
4.6.6
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
zod@3.24.2
4.6.6
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
zod@3.25.67
4.6.6
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
zod@3.25.76
4.6.6
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6
1
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
zod@4.3.6
4.6.6
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.2d7e816b5e07d
zod@4.6.5
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.