StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
zod@3.25.67
4.6.6

Open the chart page →

4,424
observability-mcpobservability-mcpOfficialVerified publisher2.9.151 of 2See more

observability-mcp observability-mcp 2.9.15

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
zod@4.6.5
4.6.6

Open the chart page →

68
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
growthbook/growthbook:latestdca716a7bf47
zod@4.1.12
4.6.6

Open the chart page →

1,642
openclawopenclaw-helm-chartVerified publisher1.0.701 of 3See more

openclaw openclaw-helm-chart 1.0.70

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.10.67dbff0fe5f53
zod@4.6.5
4.6.6

Open the chart page →

2,448
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
zod@3.25.76
4.6.6

Open the chart page →

96,248
preparrpreparr0.19.101 of 6See more

preparr preparr 0.19.10

1 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
zod@4.6.5
4.6.6

Open the chart page →

1,200
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
zod@4.4.3
4.6.6

Open the chart page →

27,427
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
zod@3.24.2
4.6.6

Open the chart page →

3,401
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zod@3.23.8
4.6.6

Open the chart page →

157,255
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
zod@4.4.3
4.6.6

Open the chart page →

3,170
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zod@3.24.2
4.6.6

Open the chart page →

6,484
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
zod@4.4.3
4.6.6

Open the chart page →

1,366
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
zod@3.24.1
4.6.6
speckle/speckle-preview-service:2.26.3092384dba45d
zod@3.23.8
4.6.6
speckle/speckle-server:2.26.379f14a2bf931
zod@3.24.1
4.6.6
speckle/speckle-webhook-service:2.26.3c58eb372c488
zod@3.24.1
4.6.6

Open the chart page →

11,864
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
zod@3.24.4
4.6.6

Open the chart page →

17,213
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
zod@3.25.76
4.6.6

Open the chart page →

56,496
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
zod@3.23.8
4.6.6

Open the chart page →

87,695
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zod@3.25.76
4.6.6

Open the chart page →

6,239
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
zod@3.25.76
4.6.6
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
zod@4.3.6
4.6.6

Open the chart page →

4,558
activepiecesadnoctemVerified publisher0.7.21 of 1See more

activepieces adnoctem 0.7.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
activepieces/activepieces:0.92.326daa5e1807f
zod@4.6.5
4.6.6

Open the chart page →

2,151
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
zod@3.25.76
4.6.6

Open the chart page →

1,670
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
zod@4.1.13
4.6.6

Open the chart page →

5,364
outlineadnoctemVerified publisher0.1.31 of 1See more

outline adnoctem 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
outlinewiki/outline:1.11.008ee9ffdb847
zod@4.5.4
4.6.6

Open the chart page →

1,757
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
zod@3.25.76
4.6.6

Open the chart page →

1,589
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

14,725
akto-hybrid-redactakto1.44.121 of 5See more

akto-hybrid-redact akto 1.44.12

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

6,582
akto-mini-testingakto1.47.01 of 5See more

akto-mini-testing akto 1.47.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
zod@3.25.76
4.6.6

Open the chart page →

5,663
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6

Open the chart page →

7,716
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
zod@3.24.1
4.6.6

Open the chart page →

6,580
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
zod@4.6.5
4.6.6

Open the chart page →

1,348
cross-seedalekcVerified publisher8.0.01 of 1See more

cross-seed alekc 8.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.99279fa3b4c6f
zod@3.22.4
4.6.6

Open the chart page →

286
excalidashalekcVerified publisher2.0.11 of 2See more

excalidash alekc 2.0.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
zod@4.1.12
4.6.6

Open the chart page →

83
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
zod@3.20.6
4.6.6

Open the chart page →

3,756
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
zod@3.23.8
4.6.6

Open the chart page →

6,037
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
zod@3.25.76
4.6.6

Open the chart page →

2,903
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6

Open the chart page →

8,756
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
zod@3.20.6
4.6.6

Open the chart page →

3,503
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
zod@4.6.5
4.6.6

Open the chart page →

2,496
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6

Open the chart page →

1,622
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6

Open the chart page →

1,622
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/ghost:6.69.0-alpine3.23db4c56c196d6
zod@3.25.76
4.6.6

Open the chart page →

1,377
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
zod@3.25.76
4.6.6

Open the chart page →

2,375
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
zod@3.24.2
4.6.6

Open the chart page →

3,514
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
zod@3.25.76
4.6.6
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
zod@3.25.76
4.6.6

Open the chart page →

23,504
codiac-cluster-agent-chartcodiac-cluster-agent1.0.381 of 1See more

codiac-cluster-agent-chart codiac-cluster-agent 1.0.38

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
zod@3.25.76
4.6.6

Open the chart page →

1,856
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
zod@3.24.2
4.6.6

Open the chart page →

33,648
decisionrules-aksdecisionrules-aksOfficialVerified publisher0.3.01 of 2See more

decisionrules-aks decisionrules-aks 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-eksdecisionrules-eksOfficialVerified publisher0.4.01 of 2See more

decisionrules-eks decisionrules-eks 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-ingressdecisionrules-ingressOfficialVerified publisher0.3.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6

Open the chart page →

606
decisionrules-ocpdecisionrules-ocpOfficialVerified publisher0.2.11 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
zod@4.4.3
4.6.6

Open the chart page →

2,201
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
zod@3.21.4
4.6.6

Open the chart page →

2,086

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6
3
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
zod@4.3.6
4.6.6
3
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
zod@3.25.76
4.6.6
2
library/ghost:6.71.000032f157262
zod@4.6.5
4.6.6
2
n8nio/n8n:2.36.714c4285bc303
zod@3.25.76
4.6.6
2
outlinewiki/outline:0.69.1d060dcd8f9aa
zod@3.21.4
4.6.6
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
zod@4.6.5
4.6.6
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
zod@4.4.3
4.6.6
2
activepieces/activepieces:0.92.326daa5e1807f
zod@4.6.5
4.6.6
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
zod@3.25.76
4.6.6
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
zod@4.3.6
4.6.6
1
agentarea/agentarea-mcp-base:0.1.1:latest8b80f30570ff
zod@4.6.5
4.6.6
1
akeyless/gateway:5.5.30f582fc294a0
zod@3.25.76
4.6.6
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
zod@3.24.1
4.6.6
1
alazidis/stornx:1.1.1602d4f7f090c
zod@3.24.4
4.6.6
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
zod@3.23.8
4.6.6
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
zod@3.23.8
4.6.6
1
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
zod@4.1.11
4.6.6
1
archivebox/archivebox:0.9.73d4720d86c0e9
zod@3.25.76
4.6.6
1
betterdb/monitor:0.51.1-no-aic4910692b3fc
zod@4.3.6
4.6.6
1
bkimminich/juice-shop:v20.2.08739101ade29
zod@4.4.3
4.6.6
1
budibase/apps:3.41.344fe6feab985
zod@4.3.6
4.6.6
1
budibase/worker:3.41.3de5e2e560ce8
zod@4.3.6
4.6.6
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
zod@3.23.8
4.6.6
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
zod@3.22.4
4.6.6
1
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
zod@3.25.76
4.6.6
1
decisionrules/server:latestbb3a93224b5a
zod@4.4.3
4.6.6
1
defectdojo/defectdojo-nginx:3.4.2023bca07c2050f
zod@4.5.4
4.6.6
1
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
zod@4.6.5
4.6.6
1
directus/directus:12.0.29c8470ea465c
zod@4.1.12
4.6.6
1
directus/directus:11.1.0e3c8bb975350
zod@3.23.8
4.6.6
1
diygod/rsshub:2025-11-097a6312cac0d5
zod@3.25.76
4.6.6
1
docmost/docmost:0.96.0b56947fcfd08
zod@4.3.6
4.6.6
1
documenso/documenso:v1.8.17f16a9449f18
zod@3.22.3
4.6.6
1
drumsergio/lynxprompt:2.1.40e66bb00c2696
zod@4.6.5
4.6.6
1
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
zod@4.1.12
4.6.6
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
zod@3.20.6
4.6.6
1
evoapicloud/evolution-api:latest966625532d90
zod@3.25.76
4.6.6
1
factly/mande-web:0.34.1742355964b0e
zod@3.21.4
4.6.6
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
zod@3.20.6
4.6.6
1
fallenbagel/jellyseerr:latest91edd5620e51
zod@3.24.2
4.6.6
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
zod@3.20.6
4.6.6
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
zod@4.3.2
4.6.6
1
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
zod@4.3.2
4.6.6
1
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
zod@4.3.2
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.