StackRadar

CVE-2026-54693

High

Advisory

Published 29 Jul 2026In the index since 14 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 17,781 indexed, latest versions
Container images
1
deployed by those charts
Fix available
None
affected package

ZITADEL Users Can Self-Verify Email/Phone via API

Carried by container images the latest versions of 1 of 17,781 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
github.com/zitadel/zitadelgolangv4.17.3no fix listed1
OSV records
GHSA-jq8w-8q2f-ffm9
Also known as
GO-2026-6141

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
zitadelquench-zitadelVerified publisher0.0.161 of 2See more

zitadel quench-zitadel 0.0.16

1 of the 2 container images this version deploys carry CVE-2026-54693.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/zitadeldigest-pinneded99c430e159
github.com/zitadel/zitadel@v4.17.3
no fix listed

Open the chart page →

291

Container images carrying it

1 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/quenchworks/images/zitadeled99c430e159
github.com/zitadel/zitadel@v4.17.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.