StackRadar

CVE-2026-77301

High

Advisory

Published 18 Sept 2026In the index since 19 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
61
of 17,813 indexed, latest versions
Container images
53
deployed by those charts
Fix available
1 of 1
affected package

adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

Carried by container images the latest versions of 61 of 17,813 indexed charts deploy, on 53 images.

Affected packageAffected versionsFixed inImages
adm-zipnpm0.4.11, 0.4.13, 0.4.16, 0.5.3+9 more0.6.153
OSV records
GHSA-7q85-xj36-vmfc

Charts affected

61 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.411 of 1See more

n8n community-charts 1.24.41

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:2.39.8b73045abaddb
adm-zip@0.6.0
0.6.1

Open the chart page →

732
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
0.6.1

Open the chart page →

1,064
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.1

Open the chart page →

5,671
n8nhelmforgeVerified publisher2.1.01 of 2See more

n8n helmforge 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:2.39.5cfa04788a34a
adm-zip@0.6.0
0.6.1

Open the chart page →

823
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.1

Open the chart page →

2,596
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.1

Open the chart page →

2,847
etherpadnicholaswildeVerified publisher1.0.21 of 1See more

etherpad nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
adm-zip@0.5.5
0.6.1

Open the chart page →

4,100
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

1,057
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.1

Open the chart page →

1,741
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.1

Open the chart page →

598
libredb-studiolibredb-studioVerified publisher0.1.661 of 1See more

libredb-studio libredb-studio 0.1.66

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.16.11d0aa4f090ac
adm-zip@0.6.0
0.6.1

Open the chart page →

1,200
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.1

Open the chart page →

2,530
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
adm-zip@0.6.0
0.6.1

Open the chart page →

1,421
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
0.6.1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
0.6.1

Open the chart page →

32,055
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.1

Open the chart page →

4,299
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.1

Open the chart page →

5,075
plane-enterprisemakeplaneOfficialVerified publisher3.7.41 of 13See more

plane-enterprise makeplane 3.7.4

1 of the 13 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
makeplane/silo-commercial:v3.2.261bd29053757
adm-zip@0.6.0
0.6.1

Open the chart page →

5,200
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.1

Open the chart page →

2,619
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.1

Open the chart page →

32,365
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.1

Open the chart page →

5,704
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.1

Open the chart page →

4,896
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.1

Open the chart page →

1,301
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.1

Open the chart page →

3,255
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.1

Open the chart page →

9,452
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.1

Open the chart page →

2,607
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

22,740
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1

Open the chart page →

2,282
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.1

Open the chart page →

3,277
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1

Open the chart page →

4,775
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.1

Open the chart page →

13,459
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
adm-zip@0.5.12
0.6.1

Open the chart page →

3,114
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.1

Open the chart page →

4,962
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.1

Open the chart page →

6,003
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.1

Open the chart page →

1,455
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.1

Open the chart page →

3,426
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.1

Open the chart page →

2,704
libredb-studiolibredb-studio-oci0.1.661 of 1See more

libredb-studio libredb-studio-oci 0.1.66

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.16.11d0aa4f090ac
adm-zip@0.6.0
0.6.1

Open the chart page →

1,200
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.1

Open the chart page →

1,511
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1

Open the chart page →

1,064
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.1

Open the chart page →

2,443
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1

Open the chart page →

1,064
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
etherpad/etherpad:latest6020e7b57f4b
adm-zip@0.5.18
0.6.1

Open the chart page →

921
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

1,057
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.1

Open the chart page →

1,904
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.1

Open the chart page →

5,244
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1

Open the chart page →

19,929
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1

Open the chart page →

16,923
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.1

Open the chart page →

5,602
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
adm-zip@0.5.17
0.6.1

Open the chart page →

2,147
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-77301.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
adm-zip@0.5.12
0.6.1

Open the chart page →

3,114

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
adm-zip@0.5.5
0.6.1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
0.6.1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
0.6.1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.