StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
zod@3.24.2
4.6.6

Open the chart page →

3,247
logtidelogtideVerified publisher2.1.142 of 4See more

logtide logtide 2.1.14

2 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
zod@3.25.76
4.6.6
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
zod@3.25.76
4.6.6

Open the chart page →

4,334
lynxpromptlynxpromptVerified publisher0.1.41 of 3See more

lynxprompt lynxprompt 0.1.4

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.1.40e66bb00c2696
zod@4.6.5
4.6.6

Open the chart page →

980
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
zod@3.22.5
4.6.6

Open the chart page →

92,378
mcp-gitlabmcp-helmVerified publisher0.3.41 of 1See more

mcp-gitlab mcp-helm 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
zod@3.24.2
4.6.6

Open the chart page →

1,308
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
zod@3.25.76
4.6.6

Open the chart page →

7,815
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
zod@3.22.4
4.6.6

Open the chart page →

60,075
miot-dashboard-servermicroboxlabs0.1.21 of 1See more

miot-dashboard-server microboxlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-dashboard-server:latest1927998c0131
zod@3.25.76
4.6.6

Open the chart page →

172
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
zod@3.25.76
4.6.6

Open the chart page →

2,384
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
zod@3.25.76
4.6.6

Open the chart page →

3,041
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
zod@3.22.2
4.6.6

Open the chart page →

5,540
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
zod@3.25.76
4.6.6

Open the chart page →

2,762
bluesky-pdsnerkho-helm-charts0.4.21 of 1See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
zod@3.25.76
4.6.6

Open the chart page →

3,179
nostreamnostream0.1.01 of 1See more

nostream nostream 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cameri/nostream:main5715366725fa
zod@3.25.76
4.6.6

Open the chart page →

582
firecrawlobeoneVerified publisher3.0.211 of 5See more

firecrawl obeone 3.0.21

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
zod@4.1.12
4.6.6

Open the chart page →

12,005
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
zod@3.25.76
4.6.6

Open the chart page →

2,762
console-apiovrclk-20.1.11 of 1See more

console-api ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/akash-network/console-api:2.64.0ba359097329d
zod@3.23.8
4.6.6

Open the chart page →

4,505
console-webovrclk-20.1.11 of 1See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
zod@3.23.8
4.6.6

Open the chart page →

3,130
provider-consoleovrclk-20.1.01 of 1See more

provider-console ovrclk-2 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
zod@3.23.8
4.6.6

Open the chart page →

2,609
provider-proxyovrclk-20.1.11 of 1See more

provider-proxy ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-proxy:1.4.353f533d7c6f8
zod@3.23.8
4.6.6

Open the chart page →

3,407
radio-dixitalpvillaverdeVerified publisher1.6.01 of 1See more

radio-dixital pvillaverde 1.6.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
pvillaverde/radio_dixital:1.5.0326a793e509f
zod@3.23.8
4.6.6

Open the chart page →

427
code-serverquench-code-serverVerified publisher0.0.221 of 1See more

code-server quench-code-server 0.0.22

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/code-serverdigest-pinned16b79d479a4d
zod@4.4.3
4.6.6

Open the chart page →

90
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
zod@3.21.4
4.6.6

Open the chart page →

3,138
recipe-apprecipe-app0.1.02 of 2See more

recipe-app recipe-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
zod@3.23.8
4.6.6
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
zod@3.23.8
4.6.6

Open the chart page →

4,631
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
zod@3.23.8
4.6.6

Open the chart page →

66,468
web-checkrm3lVerified publisher0.2.01 of 1See more

web-check rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
lissy93/web-check:latest5e4feb4acbd5
zod@3.25.76
4.6.6

Open the chart page →

8,897
routr-connectroutr0.4.82 of 10See more

routr-connect routr 0.4.8

2 of the 10 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fonoster/routr-pgdata:2.18.0f6d3f3dbaed9
zod@3.25.76
4.6.6
fonoster/routr-pgdata-migrations:2.18.0af1e3b37076b
zod@3.25.76
4.6.6

Open the chart page →

14,581
rowflarerowflareVerified publisher0.1.01 of 1See more

rowflare rowflare 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rowflare/rowflare:0.1.09767136d308a
zod@4.6.4
4.6.6

Open the chart page →

1,244
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
zod@3.24.2
4.6.6

Open the chart page →

6,583
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
zod@4.5.4
4.6.6

Open the chart page →

9,350
s3-browsers3-browser0.4.11 of 1See more

s3-browser s3-browser 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
zod@4.3.6
4.6.6

Open the chart page →

788
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
zod@3.23.8
4.6.6

Open the chart page →

106,910
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
zod@3.25.76
4.6.6

Open the chart page →

5,534
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
zod@3.19.0
4.6.6

Open the chart page →

7,280
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
zod@3.21.4
4.6.6

Open the chart page →

5,714
seerr-chartseerr-chartVerified publisher3.10.11 of 1See more

seerr-chart seerr-chart 3.10.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
zod@4.3.6
4.6.6

Open the chart page →

2,314
infisicalsinextraVerified publisher0.7.21 of 1See more

infisical sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.8bb8352b71cea
zod@3.25.76
4.6.6

Open the chart page →

3,458
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
zod@3.23.8
4.6.6

Open the chart page →

6,718
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2023-54404.

Open the chart page →

18,249
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2023-54404.

Open the chart page →

18,336
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
zod@3.22.4
4.6.6

Open the chart page →

16,346
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
zod@3.23.8
4.6.6
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
zod@3.22.4
4.6.6

Open the chart page →

18,336
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
zod@3.22.4
4.6.6

Open the chart page →

15,969
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
zod@3.22.4
4.6.6

Open the chart page →

15,969
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
zod@3.23.8
4.6.6
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
zod@3.22.4
4.6.6

Open the chart page →

17,903
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef2 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

2 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
zod@3.23.8
4.6.6
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
zod@3.22.4
4.6.6

Open the chart page →

17,539
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2023-54404.

Open the chart page →

12,595
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
zod@4.1.13
4.6.6

Open the chart page →

2,337
strapistrapi-xmv0.1.21 of 1See more

strapi strapi-xmv 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
zod@3.25.67
4.6.6

Open the chart page →

839
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
zod@3.25.76
4.6.6

Open the chart page →

5,351

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
zod@4.3.6
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
zod@3.24.2
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
zod@3.21.4
4.6.6
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
zod@4.6.5
4.6.6
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
zod@3.25.76
4.6.6
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
zod@3.25.76
4.6.6
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
zod@3.23.8
4.6.6
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
zod@3.22.4
4.6.6
1
ghcr.io/microboxlabs/miot-dashboard-server:latest1927998c0131
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zod@3.25.76
4.6.6
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
zod@4.6.5
4.6.6
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
zod@3.25.76
4.6.6
1
ghcr.io/quenchworks/images/code-server16b79d479a4d
zod@4.4.3
4.6.6
1
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
zod@3.22.5
4.6.6
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
zod@4.5.4
4.6.6
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
zod@3.20.6
4.6.6
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
zod@4.3.6
4.6.6
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
zod@4.6.5
4.6.6
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
zod@3.24.1
4.6.6
1
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
zod@3.25.76
4.6.6
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6
1
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
zod@3.25.76
4.6.6
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
zod@3.24.2
4.6.6
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
zod@3.24.2
4.6.6
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
zod@3.25.67
4.6.6
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
zod@3.25.76
4.6.6
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6
1
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
zod@4.3.6
4.6.6
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.2d7e816b5e07d
zod@4.6.5
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.