StackRadar

CVE-2026-102282

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
62
of 17,957 indexed, latest versions
Container images
52
deployed by those charts
Fix available
1 of 1
affected package

adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

Carried by container images the latest versions of 62 of 17,957 indexed charts deploy, on 52 images.

Affected packageAffected versionsFixed inImages
adm-zipnpm0.4.11, 0.4.13, 0.4.16, 0.5.3+9 more0.6.152
OSV records
GHSA-j5f4-cc29-5x44

Charts affected

62 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.421 of 1See more

n8n community-charts 1.24.42

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:2.40.59f693fd55655
adm-zip@0.6.0
0.6.1

Open the chart page →

1,076
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
0.6.1

Open the chart page →

1,441
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.1

Open the chart page →

6,067
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
adm-zip@0.6.0
0.6.1

Open the chart page →

1,114
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.1

Open the chart page →

2,718
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.1

Open the chart page →

2,992
etherpadnicholaswildeVerified publisher1.0.21 of 1See more

etherpad nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
adm-zip@0.5.5
0.6.1

Open the chart page →

4,233
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

1,223
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.1

Open the chart page →

1,915
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.1

Open the chart page →

704
libredb-studiolibredb-studioVerified publisher0.1.721 of 1See more

libredb-studio libredb-studio 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
adm-zip@0.6.0
0.6.1

Open the chart page →

1,172
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.1

Open the chart page →

2,653
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
adm-zip@0.6.0
0.6.1

Open the chart page →

1,739
joplin-serverdjjudas21Verified publisher6.0.01 of 1See more

joplin-server djjudas21 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
joplin/server:3.7.23f7b852959aa
adm-zip@0.5.17
0.6.1

Open the chart page →

2,858
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
0.6.1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
0.6.1

Open the chart page →

33,660
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.1

Open the chart page →

4,481
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.1

Open the chart page →

5,379
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.1

Open the chart page →

3,070
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.1

Open the chart page →

33,687
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.1

Open the chart page →

6,073
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.1

Open the chart page →

5,179
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.1

Open the chart page →

1,438
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.1

Open the chart page →

3,369
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.1

Open the chart page →

9,696
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.1

Open the chart page →

2,731
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

23,432
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1

Open the chart page →

2,395
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.1

Open the chart page →

3,472
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1

Open the chart page →

4,887
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
adm-zip@0.5.16
0.6.1

Open the chart page →

29,747
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.1

Open the chart page →

14,004
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
infisical/infisical:latest3365445909be
adm-zip@0.5.12
0.6.1

Open the chart page →

2,955
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.1

Open the chart page →

5,125
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.1

Open the chart page →

6,455
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.1

Open the chart page →

1,639
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.1

Open the chart page →

3,556
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.1

Open the chart page →

2,806
libredb-studiolibredb-studio-oci0.1.721 of 1See more

libredb-studio libredb-studio-oci 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
adm-zip@0.6.0
0.6.1

Open the chart page →

1,172
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.1

Open the chart page →

1,688
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1

Open the chart page →

1,441
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.1

Open the chart page →

2,657
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1

Open the chart page →

1,441
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
etherpad/etherpad:latest98d395769b3b
adm-zip@0.5.18
0.6.1

Open the chart page →

255
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

1,223
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.1

Open the chart page →

2,047
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.1

Open the chart page →

5,441
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1

Open the chart page →

20,302
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1

Open the chart page →

16,987
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.1

Open the chart page →

5,751
etherpadschoenwald0.4.11 of 1See more

etherpad schoenwald 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-102282.

Container imageDigestPackageFixed in
etherpad/etherpad:3.3.698d395769b3b
adm-zip@0.5.18
0.6.1

Open the chart page →

255

Container images carrying it

52 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1
4
joplin/server:3.7.2:latest3f7b852959aa
adm-zip@0.5.17
0.6.1
3
etherpad/etherpad:3.3.6:latest98d395769b3b
adm-zip@0.5.18
0.6.1
2
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1
2
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
0.6.1
2
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
adm-zip@0.6.0
0.6.1
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.1
1
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.1
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.1
1
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.1
1
diygod/rsshub:latest22845ada2f14
adm-zip@0.6.0
0.6.1
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.1
1
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.1
1
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.1
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
adm-zip@0.5.10
0.6.1
1
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.1
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.1
1
infisical/infisical:latest:v0.165.602082bf13163
adm-zip@0.5.12
0.6.1
1
infisical/infisical:latest3365445909be
adm-zip@0.5.12
0.6.1
1
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.1
1
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.1
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.1
1
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.1
1
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.1
1
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.1
1
n8nio/n8n:2.40.59f693fd55655
adm-zip@0.6.0
0.6.1
1
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
0.6.1
1
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.1
1
n8nio/n8n:1.115.1ed16e560c40e
adm-zip@0.5.10
0.6.1
1
n8nio/n8n:2.41.3fdce8f852ac7
adm-zip@0.6.0
0.6.1
1
polonel/trudesk:1.2.60cf6513f6fe3
adm-zip@0.5.9
0.6.1
1
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.1
1
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.1
1
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.1
1
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.1
1
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.1
1
samajh/alprbackend:latestea742b4372ad
adm-zip@0.5.9
0.6.1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.1
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.1
1
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.1
1
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.1
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.1
1
ghcr.io/ajnart/homarr:lateste103abadfb52
adm-zip@0.5.15
0.6.1
1
ghcr.io/colanode/server:latest7006cac874fd
adm-zip@0.5.17
0.6.1
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
adm-zip@0.5.16
0.6.1
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.1
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.1
1
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
adm-zip@0.5.5
0.6.1
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.