StackRadar

CVE-2023-54404

High

Advisory

Published 1 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
218
of 18,232 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Zod can exhaust memory while validating oversized constrained collections

Carried by container images the latest versions of 218 of 18,232 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
zodnpm3.15.1, 3.19.0, 3.20.2, 3.20.6+21 more4.6.6237
OSV records
GHSA-mrhx-c7xc-m3w5

Charts affected

218 by stars
ChartLatestAffected imagesRadar Score
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
supabase/studio:latestd878dcd9dba7
zod@4.6.5
4.6.6

Open the chart page →

33,915
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
zod@4.1.11
4.6.6

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
zod@3.25.76
4.6.6

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
zod@4.1.12
4.6.6

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
zod@4.3.6
4.6.6

Open the chart page →

2,075
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
zod@3.25.76
4.6.6

Open the chart page →

5,216
devportalveecode-platform-nextVerified publisher1.1.21 of 1See more

devportal veecode-platform-next 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned726cc70543dd
zod@4.6.5
4.6.6

Open the chart page →

1,769
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
zod@3.22.4
4.6.6

Open the chart page →

3,564
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
zod@3.25.76
4.6.6

Open the chart page →

5,455
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
zod@4.3.6
4.6.6

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
zod@3.25.67
4.6.6

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
zod@4.1.11
4.6.6

Open the chart page →

72,567
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
zod@3.21.4
4.6.6

Open the chart page →

4,319
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
zod@3.25.76
4.6.6

Open the chart page →

7,567
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
zod@3.25.76
4.6.6

Open the chart page →

1,844
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
zod@3.23.8
4.6.6

Open the chart page →

16,335
workadventure-adminwork-adventure1.0.0-21-33 of 14See more

workadventure-admin work-adventure 1.0.0-21-3

3 of the 14 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:helm-chart53a30c962ce9
zod@3.20.2
4.6.6
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
zod@3.20.2
4.6.6
thecodingmachine/workadventure-play:helm-chartdf31006cc4ce
zod@3.20.2
4.6.6

Open the chart page →

20,885
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-54404.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
zod@3.20.2
4.6.6
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
zod@3.20.2
4.6.6
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
zod@3.20.2
4.6.6

Open the chart page →

21,555

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
zod@3.25.76
4.6.6
3
decisionrules/server:latest6f6d024a87b8
zod@4.4.3
4.6.6
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
zod@3.15.1
4.6.6
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
zod@4.3.6
4.6.6
3
epamedp/krci-portal:0.9.0ebc7ca162d87
zod@3.25.76
4.6.6
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
zod@3.25.76
4.6.6
2
library/ghost:6.71.000032f157262
zod@4.6.5
4.6.6
2
n8nio/n8n:2.36.714c4285bc303
zod@3.25.76
4.6.6
2
outlinewiki/outline:0.69.1d060dcd8f9aa
zod@3.21.4
4.6.6
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zod@3.22.4
4.6.6
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zod@4.3.6
4.6.6
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
zod@4.6.5
4.6.6
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
zod@4.4.3
4.6.6
2
activepieces/activepieces:0.92.326daa5e1807f
zod@4.6.5
4.6.6
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
zod@3.25.76
4.6.6
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
zod@4.3.6
4.6.6
1
agentarea/agentarea-mcp-base:0.1.1:latest8b80f30570ff
zod@4.6.5
4.6.6
1
akeyless/gateway:5.5.30f582fc294a0
zod@3.25.76
4.6.6
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
zod@3.24.1
4.6.6
1
alazidis/stornx:1.1.1602d4f7f090c
zod@3.24.4
4.6.6
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
zod@3.23.8
4.6.6
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
zod@3.23.8
4.6.6
1
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
zod@4.1.11
4.6.6
1
archivebox/archivebox:0.9.73d4720d86c0e9
zod@3.25.76
4.6.6
1
betterdb/monitor:0.51.1-no-aic4910692b3fc
zod@4.3.6
4.6.6
1
bkimminich/juice-shop:v20.2.08739101ade29
zod@4.4.3
4.6.6
1
budibase/apps:3.41.344fe6feab985
zod@4.3.6
4.6.6
1
budibase/worker:3.41.3de5e2e560ce8
zod@4.3.6
4.6.6
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
zod@3.23.8
4.6.6
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
zod@3.22.4
4.6.6
1
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
zod@3.25.76
4.6.6
1
decisionrules/server:latestbb3a93224b5a
zod@4.4.3
4.6.6
1
defectdojo/defectdojo-nginx:3.4.2023bca07c2050f
zod@4.5.4
4.6.6
1
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
zod@4.6.5
4.6.6
1
directus/directus:12.0.29c8470ea465c
zod@4.1.12
4.6.6
1
directus/directus:11.1.0e3c8bb975350
zod@3.23.8
4.6.6
1
diygod/rsshub:2025-11-097a6312cac0d5
zod@3.25.76
4.6.6
1
docmost/docmost:0.96.0b56947fcfd08
zod@4.3.6
4.6.6
1
documenso/documenso:v1.8.17f16a9449f18
zod@3.22.3
4.6.6
1
drumsergio/lynxprompt:2.1.40e66bb00c2696
zod@4.6.5
4.6.6
1
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
zod@4.1.12
4.6.6
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
zod@3.20.6
4.6.6
1
evoapicloud/evolution-api:latest966625532d90
zod@3.25.76
4.6.6
1
factly/mande-web:0.34.1742355964b0e
zod@3.21.4
4.6.6
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
zod@3.20.6
4.6.6
1
fallenbagel/jellyseerr:latest91edd5620e51
zod@3.24.2
4.6.6
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
zod@3.20.6
4.6.6
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
zod@4.3.2
4.6.6
1
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
zod@4.3.2
4.6.6
1
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
zod@4.3.2
4.6.6
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.