StackRadar

CVE-2026-87776

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
231
of 18,026 indexed, latest versions
Container images
218
deployed by those charts
Fix available
1 of 1
affected package

compression vulnerable to Denial of Service via memory leak on premature response close

Carried by container images the latest versions of 231 of 18,026 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
compressionnpm1.5.2, 1.6.2, 1.7.1, 1.7.3+4 more1.8.2218
OSV records
GHSA-vc2v-76pw-4v95

Charts affected

231 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
compression@1.8.1
1.8.2

Open the chart page →

1,398
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
compression@1.8.1
1.8.2

Open the chart page →

2,259
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2

Open the chart page →

34,165
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
compression@1.7.4
1.8.2

Open the chart page →

18,087
unleashunleash5.6.81 of 2See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
unleashorg/unleash-server:7.5.09adb37e399ba
compression@1.8.1
1.8.2

Open the chart page →

2,330
verdaccioverdaccio4.35.21 of 1See more

verdaccio verdaccio 4.35.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
verdaccio/verdaccio:6.10.5560744912b64
compression@1.8.1
1.8.2

Open the chart page →

327
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
compression@1.7.4
1.8.2

Open the chart page →

7,980
wekanwekanVerified publisher12.18.01 of 3See more

wekan wekan 12.18.0

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wekan/wekan:v12.1824acf0b88240
compression@1.7.4
1.8.2

Open the chart page →

1,626
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
compression@1.7.4
1.8.2

Open the chart page →

6,261
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2

Open the chart page →

3,948
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
compression@1.7.4
1.8.2

Open the chart page →

6,312
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
compression@1.8.1
1.8.2

Open the chart page →

1,744
n8nlinogicsVerified publisher0.136.01 of 1See more

n8n linogics 0.136.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:0.136.0e8302e8bd402
compression@1.7.4
1.8.2

Open the chart page →

7,582
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
compression@1.7.4
1.8.2

Open the chart page →

13,329
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
compression@1.7.4
1.8.2

Open the chart page →

2,602
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
compression@1.7.4
1.8.2

Open the chart page →

5,691
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
compression@1.7.4
1.8.2

Open the chart page →

5,610
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
compression@1.7.4
1.8.2

Open the chart page →

10,546
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
compression@1.7.4
1.8.2

Open the chart page →

6,275
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
compression@1.7.4
1.8.2

Open the chart page →

3,381
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
compression@1.7.4
1.8.2

Open the chart page →

3,280
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
compression@1.7.4
1.8.2

Open the chart page →

8,932
ghostcloudpirates-ghostVerified publisher0.20.281 of 3See more

ghost cloudpirates-ghost 0.20.28

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2

Open the chart page →

8,355
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
compression@1.7.4
1.8.2

Open the chart page →

17,283
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
compression@1.7.4
1.8.2

Open the chart page →

2,762
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
compression@1.7.4
1.8.2

Open the chart page →

9,161
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher2.0.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:main8da4c9948421
compression@1.8.1
1.8.2

Open the chart page →

1,513
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

5,345
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
compression@1.7.4
1.8.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
compression@1.7.4
1.8.2

Open the chart page →

23,691
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
compression@1.7.4
1.8.2

Open the chart page →

8,503
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2

Open the chart page →

1,450
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
thingsboard/tb-web-ui:3.6.0d388378062cc
compression@1.7.4
1.8.2

Open the chart page →

17,514
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
compression@1.8.1
1.8.2

Open the chart page →

5,210
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
compression@1.8.1
1.8.2

Open the chart page →

988
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
compression@1.7.4
1.8.2

Open the chart page →

1,591
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
compression@1.7.4
1.8.2
ghcr.io/data-fair/metrics:0a8d40779eeae
compression@1.7.4
1.8.2
ghcr.io/data-fair/notify:3c739b74dabb0
compression@1.8.0
1.8.2
ghcr.io/data-fair/portals:18b621866ceb2
compression@1.8.1
1.8.2
ghcr.io/data-fair/processings:15a9216989707
compression@1.7.4
1.8.2
ghcr.io/data-fair/simple-directory:438a4f32fad82
compression@1.7.4
1.8.2

Open the chart page →

42,584
jellystatdjjudas21Verified publisher1.0.11 of 1See more

jellystat djjudas21 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.12e61c759ec706
compression@1.8.1
1.8.2

Open the chart page →

2,084
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
compression@1.7.4
1.8.2

Open the chart page →

75,225
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
compression@1.8.0
1.8.2

Open the chart page →

35,965
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
compression@1.7.4
1.8.2

Open the chart page →

13,128
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
compression@1.7.4
1.8.2

Open the chart page →

24,215
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
compression@1.7.4
1.8.2

Open the chart page →

4,975
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
compression@1.7.4
1.8.2

Open the chart page →

8,710
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
compression@1.7.4
1.8.2

Open the chart page →

6,582
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
compression@1.7.4
1.8.2

Open the chart page →

4,542
ghostgroundhog2k0.212.151 of 1See more

ghost groundhog2k 0.212.15

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2

Open the chart page →

2,130
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
compression@1.8.1
1.8.2

Open the chart page →

926
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
compression@1.8.1
1.8.2

Open the chart page →

34,014
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
compression@1.7.4
1.8.2

Open the chart page →

5,249
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
compression@1.8.1
1.8.2

Open the chart page →

18,204

Container images carrying it

218 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
compression@1.7.4
1.8.2
3
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2
3
verdaccio/verdaccio:6.10.5560744912b64
compression@1.8.1
1.8.2
3
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2
3
chatwoot/chatwoot:v3.1.0d530ab8c1753
compression@1.7.4
1.8.2
2
governify/registry:v3.4.0d3f37f4f8168
compression@1.7.4
1.8.2
2
governify/render:v2.2.0daeca1ce28e6
compression@1.7.4
1.8.2
2
governify/reporter:v2.2.038595913458f
compression@1.7.4
1.8.2
2
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:2.5.4917318f9d7be
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:1.23.1396510915e6be
compression@1.7.4
1.8.2
2
louislam/uptime-kuma:2.3.29aeb4e51d038
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:2.5.5c74379ac4509
compression@1.8.1
1.8.2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
compression@1.7.4
1.8.2
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
compression@1.7.4
1.8.2
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
compression@1.7.4
1.8.2
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
compression@1.8.1
1.8.2
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
compression@1.8.0
1.8.2
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
compression@1.7.4
1.8.2
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
compression@1.8.1
1.8.2
2
n8nio/n8n:2.36.714c4285bc303
compression@1.8.1
1.8.2
2
requarks/wiki:latestfffff288a52f
compression@1.8.1
1.8.2
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
compression@1.8.1
1.8.2
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
compression@1.7.4
1.8.2
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
compression@1.7.4
1.8.2
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
compression@1.8.1
1.8.2
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
compression@1.7.4
1.8.2
2
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
compression@1.8.0
1.8.2
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
compression@1.7.4
1.8.2
2
0hlov3/semaphore:v1.0.050f874ec096b
compression@1.7.4
1.8.2
1
apimap/developer:v1.3.1406d3858e20c
compression@1.7.4
1.8.2
1
apimap/portal:v2.4.0041a4790c65c
compression@1.7.4
1.8.2
1
arfath29/3-tier-app-frontend:latest384b3e377f47
compression@1.7.4
1.8.2
1
assistiot/open_api_frontend:1.0.1f11d82defc70
compression@1.7.4
1.8.2
1
baserow/baserow:1.30.1df0c42eb67e8
compression@1.7.4
1.8.2
1
catalysm/csmm:lateste8e3d06f1d70
compression@1.7.1
1.8.2
1
cccs/assemblyline-ui-frontend:4.7.4.stable21c00e72d90666
compression@1.8.1
1.8.2
1
ccjacobs14/amazon:59a9b14a6f09e
compression@1.7.4
1.8.2
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
compression@1.7.4
1.8.2
1
codercom/code-server:4.11.0-debian1e2cc688008e
compression@1.7.4
1.8.2
1
codercom/code-server:3.10.247605610ad8d
compression@1.7.4
1.8.2
1
coldatom/containers-security-front:latest7c2fbbb41bcf
compression@1.7.4
1.8.2
1
conduction/conduction-ui-app:devd591f5e6f2a9
compression@1.7.4
1.8.2
1
cyfershepard/jellystat:1.1.12e61c759ec706
compression@1.8.1
1.8.2
1
datarhei/restreamer:0.6.4655e12f9eeed
compression@1.7.4
1.8.2
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
compression@1.7.4
1.8.2
1
enketo/enketo-express:3.0.4dcad9c2273f6
compression@1.7.4
1.8.2
1
evoapicloud/evolution-api:latest966625532d90
compression@1.8.1
1.8.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.