StackRadar

CVE-2026-76845

Medium

Advisory

Published 24 Aug 2026In the index since 9 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
47
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
None
affected package

adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite

Carried by container images the latest versions of 47 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
adm-zipnpm0.5.9, 0.5.10, 0.5.12, 0.5.15+4 moreno fix listed40
OSV records
GHSA-vwc7-r8mq-g2x9

Charts affected

47 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.401 of 1See more

n8n community-charts 1.24.40

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
adm-zip@0.6.0
no fix listed

Open the chart page →

772
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
no fix listed

Open the chart page →

1,038
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
no fix listed

Open the chart page →

5,639
n8nhelmforgeVerified publisher2.0.01 of 2See more

n8n helmforge 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
adm-zip@0.6.0
no fix listed

Open the chart page →

863
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
no fix listed

Open the chart page →

2,581
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
no fix listed

Open the chart page →

2,828
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
adm-zip@0.5.10
no fix listed

Open the chart page →

1,038
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
no fix listed

Open the chart page →

1,721
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
no fix listed

Open the chart page →

578
libredb-studiolibredb-studioVerified publisher0.1.631 of 1See more

libredb-studio libredb-studio 0.1.63

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
adm-zip@0.6.0
no fix listed

Open the chart page →

1,222
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
adm-zip@0.6.0
no fix listed

Open the chart page →

1,717
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
no fix listed

Open the chart page →

31,510
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
no fix listed

Open the chart page →

5,654
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
no fix listed

Open the chart page →

2,575
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
adm-zip@0.6.0
no fix listed

Open the chart page →

1,916
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
no fix listed

Open the chart page →

31,844
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
no fix listed

Open the chart page →

5,482
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
adm-zip@0.5.10
no fix listed

Open the chart page →

26,657
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
no fix listed

Open the chart page →

4,880
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
no fix listed

Open the chart page →

1,273
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
no fix listed

Open the chart page →

9,369
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
no fix listed

Open the chart page →

22,193
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
no fix listed

Open the chart page →

13,241
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
adm-zip@0.5.12
no fix listed

Open the chart page →

3,014
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
no fix listed

Open the chart page →

5,826
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
no fix listed

Open the chart page →

1,290
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
no fix listed

Open the chart page →

2,685
libredb-studiolibredb-studio-oci0.1.631 of 1See more

libredb-studio libredb-studio-oci 0.1.63

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
adm-zip@0.6.0
no fix listed

Open the chart page →

1,222
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
no fix listed

Open the chart page →

1,490
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
no fix listed

Open the chart page →

1,038
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
no fix listed

Open the chart page →

2,421
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
no fix listed

Open the chart page →

1,038
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
etherpad/etherpad:latest6020e7b57f4b
adm-zip@0.5.18
no fix listed

Open the chart page →

895
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
no fix listed

Open the chart page →

1,038
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
no fix listed

Open the chart page →

1,884
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
no fix listed

Open the chart page →

5,582
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
adm-zip@0.5.17
no fix listed

Open the chart page →

2,133
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
adm-zip@0.5.12
no fix listed

Open the chart page →

3,014
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
adm-zip@0.5.9
no fix listed

Open the chart page →

4,017
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
no fix listed

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
no fix listed

Open the chart page →

5,604
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
adm-zip@0.5.9
no fix listed

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
no fix listed

Open the chart page →

4,661
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
adm-zip@0.5.17
no fix listed

Open the chart page →

5,535
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
adm-zip@0.5.15
no fix listed

Open the chart page →

2,789
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
adm-zip@0.5.17
no fix listed

Open the chart page →

2,076
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-76845.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
adm-zip@0.5.9
no fix listed

Open the chart page →

6,285

Container images carrying it

40 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
adm-zip@0.5.10
no fix listed
4
infisical/infisical:latest:v0.165.602082bf13163
adm-zip@0.5.12
no fix listed
2
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
no fix listed
2
n8nio/n8n:2.38.45d9f0cc5672b
adm-zip@0.6.0
no fix listed
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
no fix listed
2
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
adm-zip@0.6.0
no fix listed
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
no fix listed
1
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
no fix listed
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
no fix listed
1
diygod/rsshub:latest1d4b508b6357
adm-zip@0.6.0
no fix listed
1
etherpad/etherpad:latest6020e7b57f4b
adm-zip@0.5.18
no fix listed
1
etherpad/etherpad:2.7.2b723fe5f2594
adm-zip@0.5.17
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
adm-zip@0.5.10
no fix listed
1
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
no fix listed
1
joplin/server:latest3f7b852959aa
adm-zip@0.5.17
no fix listed
1
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
no fix listed
1
library/kibana:8.18.004c0fc150f3a
adm-zip@0.5.9
no fix listed
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
no fix listed
1
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
no fix listed
1
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
no fix listed
1
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
no fix listed
1
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
no fix listed
1
polonel/trudesk:1.2.60cf6513f6fe3
adm-zip@0.5.9
no fix listed
1
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
no fix listed
1
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
no fix listed
1
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
no fix listed
1
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
no fix listed
1
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
no fix listed
1
samajh/alprbackend:latestea742b4372ad
adm-zip@0.5.9
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
no fix listed
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
no fix listed
1
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
no fix listed
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
no fix listed
1
ghcr.io/ajnart/homarr:lateste103abadfb52
adm-zip@0.5.15
no fix listed
1
ghcr.io/colanode/server:latest7006cac874fd
adm-zip@0.5.17
no fix listed
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
no fix listed
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
no fix listed
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
adm-zip@0.6.0
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.