StackRadar

CVE-2026-87776

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
231
of 18,026 indexed, latest versions
Container images
218
deployed by those charts
Fix available
1 of 1
affected package

compression vulnerable to Denial of Service via memory leak on premature response close

Carried by container images the latest versions of 231 of 18,026 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
compressionnpm1.5.2, 1.6.2, 1.7.1, 1.7.3+4 more1.8.2218
OSV records
GHSA-vc2v-76pw-4v95

Charts affected

231 by stars
ChartLatestAffected imagesRadar Score
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
compression@1.7.4
1.8.2

Open the chart page →

3,377
plane-enterprisemakeplaneOfficialVerified publisher3.10.22 of 13See more

plane-enterprise makeplane 3.10.2

2 of the 13 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
compression@1.8.1
1.8.2
makeplane/space-commercial:v3.3.03dba6a659fb9
compression@1.8.1
1.8.2

Open the chart page →

6,161
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
compression@1.7.4
1.8.2

Open the chart page →

6,120
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
compression@1.8.1
1.8.2

Open the chart page →

3,835
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
compression@1.7.3
1.8.2

Open the chart page →

3,599
tristian-idnonkronk0.1.31 of 1See more

tristian-id nonkronk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nonkronk/tristian-id:latest0a3694d70647
compression@1.7.3
1.8.2

Open the chart page →

1,173
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
growthbook/growthbook:latest67b7cd7d12a1
compression@1.8.1
1.8.2

Open the chart page →

1,550
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
compression@1.8.0
1.8.2

Open the chart page →

7,957
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
compression@1.8.1
1.8.2

Open the chart page →

8,241
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
compression@1.7.4
1.8.2
treskon/portrait-ui:DEV-lateste7970783bc8d
compression@1.8.0
1.8.2

Open the chart page →

36,111
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
compression@1.8.0
1.8.2

Open the chart page →

3,389
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
compression@1.8.1
1.8.2

Open the chart page →

42,559
immichsecustorVerified publisher2.0.71 of 1See more

immich secustor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
compression@1.8.1
1.8.2

Open the chart page →

3,343
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
compression@1.7.4
1.8.2

Open the chart page →

11,845
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
compression@1.7.4
1.8.2

Open the chart page →

8,751
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
compression@1.7.4
1.8.2

Open the chart page →

13,666
prerenderutkuozdemirVerified publisher1.1.21 of 1See more

prerender utkuozdemir 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tvanro/prerender-alpine:6.4.06909015f0328
compression@1.7.4
1.8.2

Open the chart page →

2,745
restreamerutkuozdemirVerified publisher1.1.01 of 1See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
datarhei/restreamer:0.6.4655e12f9eeed
compression@1.7.4
1.8.2

Open the chart page →

3,166
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
compression@1.8.1
1.8.2

Open the chart page →

2,599
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
compression@1.7.4
1.8.2

Open the chart page →

2,288
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
compression@1.7.4
1.8.2

Open the chart page →

10,814
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
soulou2019/node-server:latest5e6ecfcc109e
compression@1.7.4
1.8.2

Open the chart page →

3,526
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
compression@1.8.1
1.8.2

Open the chart page →

1,596
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
compression@1.8.1
1.8.2

Open the chart page →

34,025
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
compression@1.7.4
1.8.2

Open the chart page →

3,744
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
compression@1.7.4
1.8.2

Open the chart page →

3,446
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
compression@1.7.4
1.8.2

Open the chart page →

2,719
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
compression@1.7.4
1.8.2

Open the chart page →

2,763
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
compression@1.7.4
1.8.2

Open the chart page →

2,932
assemblylineassemblylineVerified publisher7.4.211 of 12See more

assemblyline assemblyline 7.4.21

1 of the 12 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
cccs/assemblyline-ui-frontend:4.7.4.stable21c00e72d90666
compression@1.8.1
1.8.2

Open the chart page →

14,416
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
compression@1.7.4
1.8.2
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

92,801
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
wettyoss/wetty:latestc52dac712353
compression@1.8.1
1.8.2

Open the chart page →

7,524
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
compression@1.8.1
1.8.2

Open the chart page →

2,619
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
compression@1.8.1
1.8.2

Open the chart page →

7,816
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
compression@1.5.2
1.8.2

Open the chart page →

4,629
ghostchart-ghost0.1.61 of 2See more

ghost chart-ghost 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.65.0-alpine3.23fea3264f902e
compression@1.8.1
1.8.2

Open the chart page →

1,762
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
compression@1.7.4
1.8.2

Open the chart page →

26,458
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
compression@1.7.5
1.8.2
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
compression@1.8.0
1.8.2
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
compression@1.8.0
1.8.2

Open the chart page →

22,248
stocksalescluster-deploy0.1.31 of 1See more

stocksales cluster-deploy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
foggbh/stocky:latest8b7a2e5ecf4e
compression@1.8.1
1.8.2

Open the chart page →

596
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
compression@1.7.4
1.8.2

Open the chart page →

15,492
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
compression@1.7.4
1.8.2

Open the chart page →

11,917
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
compression@1.8.0
1.8.2

Open the chart page →

16,312
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

5,345
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
compression@1.7.4
1.8.2

Open the chart page →

5,270
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2

Open the chart page →

34,165
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
compression@1.7.4
1.8.2

Open the chart page →

4,324
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
compression@1.8.1
1.8.2

Open the chart page →

2,147

Container images carrying it

218 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fallenbagel/jellyseerr:latest4538137bc5af
compression@1.8.0
1.8.2
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
compression@1.7.4
1.8.2
1
foggbh/stocky:latest8b7a2e5ecf4e
compression@1.8.1
1.8.2
1
glenndehaan/contentbridge:latest99b9e4f73848
compression@1.7.4
1.8.2
1
growthbook/growthbook:latest67b7cd7d12a1
compression@1.8.1
1.8.2
1
growthbook/growthbook:5.1.0c8a124f55dca
compression@1.8.1
1.8.2
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
compression@1.7.4
1.8.2
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
compression@1.7.4
1.8.2
1
henrywhitaker3/speedtest-tracker:latest47159a940229
compression@1.7.4
1.8.2
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
compression@1.7.4
1.8.2
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
compression@1.7.4
1.8.2
1
joplin/server:3.0-beta52af57880c0e
compression@1.7.4
1.8.2
1
kitware/cdash:v5.4.0da5abe941506
compression@1.8.1
1.8.2
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
compression@1.7.4
1.8.2
1
konradkleine/docker-registry-frontend:v2181aad54ee64
compression@1.5.2
1.8.2
1
kyleslugg/klusterview:latestba8c36dfdfbd
compression@1.7.4
1.8.2
1
lavandadelpatio/frontend:latest501c3f31e0bc
compression@1.7.4
1.8.2
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
compression@1.7.4
1.8.2
1
library/ghost:6.37.01ef2e532ca4d
compression@1.8.1
1.8.2
1
library/ghost:6.25.12654b1e90413
compression@1.8.1
1.8.2
1
library/ghost:6.41.129773d6be407
compression@1.8.1
1.8.2
1
library/ghost:4.37.0767230c0f263
compression@1.7.4
1.8.2
1
library/ghost:6.39.0-alpine77196da4b0df
compression@1.8.1
1.8.2
1
library/ghost:5.79.083f7bf209844
compression@1.7.4
1.8.2
1
library/ghost:6.65.090592b712b6b
compression@1.8.1
1.8.2
1
library/ghost:6.65.0-alpine3.23fea3264f902e
compression@1.8.1
1.8.2
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
compression@1.7.4
1.8.2
1
linuxserver/code-server:4.10.1a5e43a05ae79
compression@1.7.4
1.8.2
1
linuxserver/codimd:latestb801bbcf6386
compression@1.7.4
1.8.2
1
lissy93/dashy:2.0.51991f7be5ed0
compression@1.7.4
1.8.2
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
compression@1.8.1
1.8.2
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
compression@1.7.4
1.8.2
1
louislam/uptime-kuma:2.0.24c364ef96aad
compression@1.8.1
1.8.2
1
louislam/uptime-kuma:170233f4acb51
compression@1.8.1
1.8.2
1
louislam/uptime-kuma:2.4.091e963bfda56
compression@1.8.1
1.8.2
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
compression@1.8.1
1.8.2
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
compression@1.7.4
1.8.2
1
louislam/uptime-kuma:1.18.5a84767d7934f
compression@1.7.4
1.8.2
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
compression@1.7.4
1.8.2
1
lyzhang1999/frontend:latest4b25cf264fd7
compression@1.7.4
1.8.2
1
maildev/maildev:2.2.1180ef51f65ee
compression@1.7.4
1.8.2
1
makeplane/live-commercial:v3.3.0488a6684637c
compression@1.8.1
1.8.2
1
makeplane/space-commercial:v3.3.03dba6a659fb9
compression@1.8.1
1.8.2
1
misskey/misskey:12.110.1e08b7c478093
compression@1.7.4
1.8.2
1
mitchxxx/amazon:214e72480ec63a
compression@1.7.4
1.8.2
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
compression@1.7.4
1.8.2
1
n8nio/n8n:2.25.7761374d4eb84
compression@1.8.1
1.8.2
1
n8nio/n8n:2.41.687e0bab2c931
compression@1.8.1
1.8.2
1
n8nio/n8n:1.86.08b39ed5a2de9
compression@1.7.4
1.8.2
1
n8nio/n8n:0.212.0a9195bc499a3
compression@1.7.4
1.8.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.