StackRadar

CVE-2026-39244

High

Advisory

Published 10 Jul 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
50
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

adm-zip: Crafted ZIP file triggers 4GB memory allocation

Carried by container images the latest versions of 50 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
adm-zipnpm0.4.11, 0.4.13, 0.4.16, 0.5.3+8 more0.6.044
OSV records
GHSA-xcpc-8h2w-3j85

Charts affected

50 by stars
ChartLatestAffected imagesRadar Score
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.0

Open the chart page →

5,639
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.0

Open the chart page →

2,581
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.0

Open the chart page →

2,828
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
adm-zip@0.5.10
0.6.0

Open the chart page →

1,038
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.0

Open the chart page →

1,721
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.0

Open the chart page →

578
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.0

Open the chart page →

2,513
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
0.6.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
0.6.0

Open the chart page →

31,510
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.0

Open the chart page →

4,260
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.0

Open the chart page →

5,654
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.0

Open the chart page →

2,575
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.0

Open the chart page →

31,844
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.0

Open the chart page →

5,482
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
adm-zip@0.5.10
0.6.0

Open the chart page →

26,657
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.0

Open the chart page →

4,880
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.0

Open the chart page →

1,273
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.0

Open the chart page →

3,237
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.0

Open the chart page →

9,369
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.0

Open the chart page →

2,580
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.0

Open the chart page →

22,193
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.0

Open the chart page →

2,266
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.0

Open the chart page →

3,260
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.0

Open the chart page →

4,756
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.0

Open the chart page →

13,241
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
adm-zip@0.5.12
0.6.0

Open the chart page →

3,014
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.0

Open the chart page →

4,944
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.0

Open the chart page →

5,826
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.0

Open the chart page →

1,290
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.0

Open the chart page →

3,397
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.0

Open the chart page →

2,685
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.0

Open the chart page →

1,490
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.0

Open the chart page →

2,421
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
etherpad/etherpad:latest6020e7b57f4b
adm-zip@0.5.18
0.6.0

Open the chart page →

895
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.0

Open the chart page →

1,038
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.0

Open the chart page →

1,884
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.0

Open the chart page →

5,215
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.0

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.0

Open the chart page →

16,620
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.0

Open the chart page →

5,582
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
adm-zip@0.5.17
0.6.0

Open the chart page →

2,133
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
adm-zip@0.5.12
0.6.0

Open the chart page →

3,014
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
adm-zip@0.5.9
0.6.0

Open the chart page →

4,017
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
0.6.0

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
0.6.0

Open the chart page →

5,604
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
adm-zip@0.5.9
0.6.0

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.0

Open the chart page →

4,661
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
adm-zip@0.5.17
0.6.0

Open the chart page →

5,535
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
adm-zip@0.5.15
0.6.0

Open the chart page →

2,789
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
adm-zip@0.5.17
0.6.0

Open the chart page →

2,076
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-39244.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
adm-zip@0.5.9
0.6.0

Open the chart page →

6,285

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
adm-zip@0.5.10
0.6.0
4
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.0
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.0
2
infisical/infisical:latest:v0.165.602082bf13163
adm-zip@0.5.12
0.6.0
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
0.6.0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.0
1
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.0
1
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.0
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.0
1
etherpad/etherpad:latest6020e7b57f4b
adm-zip@0.5.18
0.6.0
1
etherpad/etherpad:2.7.2b723fe5f2594
adm-zip@0.5.17
0.6.0
1
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.0
1
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.0
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
adm-zip@0.5.10
0.6.0
1
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.0
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.0
1
joplin/server:latest3f7b852959aa
adm-zip@0.5.17
0.6.0
1
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.0
1
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.0
1
library/kibana:8.18.004c0fc150f3a
adm-zip@0.5.9
0.6.0
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.0
1
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.0
1
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.0
1
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.0
1
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.0
1
polonel/trudesk:1.2.60cf6513f6fe3
adm-zip@0.5.9
0.6.0
1
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.0
1
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.0
1
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.0
1
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.0
1
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.0
1
samajh/alprbackend:latestea742b4372ad
adm-zip@0.5.9
0.6.0
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.0
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.0
1
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.0
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.0
1
ghcr.io/ajnart/homarr:lateste103abadfb52
adm-zip@0.5.15
0.6.0
1
ghcr.io/colanode/server:latest7006cac874fd
adm-zip@0.5.17
0.6.0
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
0.6.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
0.6.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.