StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
zod@3.24.1
4.6.6

Open the chart page →

3,397
dial-admindialVerified publisher0.20.01 of 3See more

dial-admin dial 0.20.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
zod@4.1.12
4.6.6

Open the chart page →

3,857
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
zod@3.23.8
4.6.6

Open the chart page →

5,666
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
zod@3.22.3
4.6.6

Open the chart page →

3,432
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6

Open the chart page →

5,268
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
zod@4.6.5
4.6.6

Open the chart page →

2,448
edp-installepmdedpOfficialVerified publisher3.16.01 of 7See more

edp-install epmdedp 3.16.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6

Open the chart page →

1,953
krci-portalepmdedpVerified publisher0.9.01 of 1See more

krci-portal epmdedp 0.9.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6

Open the chart page →

273
mandefactlyVerified publisher0.5.181 of 3See more

mande factly 0.5.18

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
zod@3.21.4
4.6.6

Open the chart page →

5,740
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
zod@4.3.2
4.6.6

Open the chart page →

5,649
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
zod@3.25.76
4.6.6

Open the chart page →

32,835
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
zod@4.3.2
4.6.6

Open the chart page →

3,657
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
zod@4.3.2
4.6.6

Open the chart page →

12,093
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
zod@4.3.6
4.6.6

Open the chart page →

34,763
linkwardenfmjstudios0.3.61 of 2See more

linkwarden fmjstudios 0.3.6

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6

Open the chart page →

3,970
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
zod@3.23.8
4.6.6

Open the chart page →

8,072
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

2,998
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6

Open the chart page →

2,998
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
zod@3.24.2
4.6.6

Open the chart page →

3,717
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6

Open the chart page →

8,462
affinehelmforgeVerified publisher1.0.51 of 3See more

affine helmforge 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6

Open the chart page →

4,913
appwritehelmforgeVerified publisher2.0.71 of 5See more

appwrite helmforge 2.0.7

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
zod@4.1.11
4.6.6

Open the chart page →

4,813
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
zod@3.25.76
4.6.6

Open the chart page →

7,111
bytestashhelmforgeVerified publisher1.0.41 of 1See more

bytestash helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
zod@3.25.76
4.6.6

Open the chart page →

59
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
zod@3.25.76
4.6.6

Open the chart page →

2,196
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
zod@4.6.5
4.6.6

Open the chart page →

3,067
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
zod@4.6.5
4.6.6

Open the chart page →

5,372
hermes-agenthelmforgeVerified publisher1.0.21 of 1See more

hermes-agent helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
zod@4.4.3
4.6.6

Open the chart page →

8,093
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6

Open the chart page →

13,985
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
zod@3.25.76
4.6.6

Open the chart page →

70,650
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6

Open the chart page →

3,778
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
zod@4.6.1
4.6.6

Open the chart page →

4,422
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
zod@4.3.6
4.6.6

Open the chart page →

7,473
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
zod@4.4.3
4.6.6

Open the chart page →

2,761
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.49.080e1b33b0b4b
zod@4.1.11
4.6.6

Open the chart page →

3,146
self-learning-platformhelm-self-learning-platformVerified publisher1.1.21 of 1See more

self-learning-platform helm-self-learning-platform 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
zod@4.6.5
4.6.6

Open the chart page →

757
browserlessicoretechVerified publisher0.18.41 of 1See more

browserless icoretech 0.18.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
zod@4.6.5
4.6.6

Open the chart page →

1,284
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4048b1ca07690
zod@3.25.76
4.6.6

Open the chart page →

9,661
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
zod@3.25.76
4.6.6

Open the chart page →

2,830
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
zod@3.25.76
4.6.6

Open the chart page →

2,830
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
zod@3.20.6
4.6.6

Open the chart page →

6,040
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
nocodb/nocodb:lateste8fee91b205b
zod@3.25.76
4.6.6

Open the chart page →

257
n8njanip81-helm-chartsVerified publisher0.1.51 of 1See more

n8n janip81-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
zod@3.24.1
4.6.6

Open the chart page →

7,318
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
moreillon/group-manager:latest3caa8f710ee0
zod@4.3.6
4.6.6

Open the chart page →

320,051
juice-shopjuice-shop5.9.01 of 1See more

juice-shop juice-shop 5.9.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
bkimminich/juice-shop:v20.2.08739101ade29
zod@4.4.3
4.6.6

Open the chart page →

2,077
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
zod@4.1.12
4.6.6

Open the chart page →

4,468
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
zod@4.1.13
4.6.6

Open the chart page →

3,968
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
zod@3.25.76
4.6.6

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
zod@4.3.6
4.6.6

Open the chart page →

2,472
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
zod@3.21.4
4.6.6

Open the chart page →

2,893

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
zod@4.3.6
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
zod@3.24.2
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
zod@3.25.76
4.6.6
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
zod@3.25.76
4.6.6
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
zod@3.22.4
4.6.6
1
ghcr.io/microboxlabs/miot-dashboard-server:latest1927998c0131
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
zod@4.6.5
4.6.6
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6
1
ghcr.io/quenchworks/images/code-server16b79d479a4d
zod@4.4.3
4.6.6
1
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
zod@3.22.5
4.6.6
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
zod@4.5.4
4.6.6
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
zod@3.20.6
4.6.6
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
zod@4.3.6
4.6.6
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
zod@4.6.5
4.6.6
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
zod@3.24.1
4.6.6
1
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6
1
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
zod@3.25.76
4.6.6
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
zod@3.24.2
4.6.6
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
zod@3.24.2
4.6.6
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
zod@3.25.67
4.6.6
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
zod@3.25.76
4.6.6
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6
1
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
zod@4.3.6
4.6.6
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.2d7e816b5e07d
zod@4.6.5
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.