StackRadar

CVE-2026-87776

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
231
of 18,026 indexed, latest versions
Container images
218
deployed by those charts
Fix available
1 of 1
affected package

compression vulnerable to Denial of Service via memory leak on premature response close

Carried by container images the latest versions of 231 of 18,026 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
compressionnpm1.5.2, 1.6.2, 1.7.1, 1.7.3+4 more1.8.2218
OSV records
GHSA-vc2v-76pw-4v95

Charts affected

231 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
compression@1.8.1
1.8.2

Open the chart page →

1,398
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
compression@1.8.1
1.8.2

Open the chart page →

2,259
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2

Open the chart page →

34,165
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
compression@1.7.4
1.8.2

Open the chart page →

18,087
unleashunleash5.6.81 of 2See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
unleashorg/unleash-server:7.5.09adb37e399ba
compression@1.8.1
1.8.2

Open the chart page →

2,330
verdaccioverdaccio4.35.21 of 1See more

verdaccio verdaccio 4.35.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
verdaccio/verdaccio:6.10.5560744912b64
compression@1.8.1
1.8.2

Open the chart page →

327
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
compression@1.7.4
1.8.2

Open the chart page →

7,980
wekanwekanVerified publisher12.18.01 of 3See more

wekan wekan 12.18.0

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wekan/wekan:v12.1824acf0b88240
compression@1.7.4
1.8.2

Open the chart page →

1,626
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
compression@1.7.4
1.8.2

Open the chart page →

6,261
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2

Open the chart page →

3,948
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
compression@1.7.4
1.8.2

Open the chart page →

6,312
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
compression@1.8.1
1.8.2

Open the chart page →

1,744
n8nlinogicsVerified publisher0.136.01 of 1See more

n8n linogics 0.136.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:0.136.0e8302e8bd402
compression@1.7.4
1.8.2

Open the chart page →

7,582
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
compression@1.7.4
1.8.2

Open the chart page →

13,329
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
compression@1.7.4
1.8.2

Open the chart page →

2,602
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
compression@1.7.4
1.8.2

Open the chart page →

5,691
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
compression@1.7.4
1.8.2

Open the chart page →

5,610
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
compression@1.7.4
1.8.2

Open the chart page →

10,546
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
compression@1.7.4
1.8.2

Open the chart page →

6,275
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
compression@1.7.4
1.8.2

Open the chart page →

3,381
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
compression@1.7.4
1.8.2

Open the chart page →

3,280
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
compression@1.7.4
1.8.2

Open the chart page →

8,932
ghostcloudpirates-ghostVerified publisher0.20.281 of 3See more

ghost cloudpirates-ghost 0.20.28

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2

Open the chart page →

8,355
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
compression@1.7.4
1.8.2

Open the chart page →

17,283
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
compression@1.7.4
1.8.2

Open the chart page →

2,762
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
compression@1.7.4
1.8.2

Open the chart page →

9,161
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher2.0.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:main8da4c9948421
compression@1.8.1
1.8.2

Open the chart page →

1,513
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

5,345
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
compression@1.7.4
1.8.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
compression@1.7.4
1.8.2

Open the chart page →

23,691
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
compression@1.7.4
1.8.2

Open the chart page →

8,503
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2

Open the chart page →

1,450
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
thingsboard/tb-web-ui:3.6.0d388378062cc
compression@1.7.4
1.8.2

Open the chart page →

17,514
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
compression@1.8.1
1.8.2

Open the chart page →

5,210
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
compression@1.8.1
1.8.2

Open the chart page →

988
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
compression@1.7.4
1.8.2

Open the chart page →

1,591
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
compression@1.7.4
1.8.2
ghcr.io/data-fair/metrics:0a8d40779eeae
compression@1.7.4
1.8.2
ghcr.io/data-fair/notify:3c739b74dabb0
compression@1.8.0
1.8.2
ghcr.io/data-fair/portals:18b621866ceb2
compression@1.8.1
1.8.2
ghcr.io/data-fair/processings:15a9216989707
compression@1.7.4
1.8.2
ghcr.io/data-fair/simple-directory:438a4f32fad82
compression@1.7.4
1.8.2

Open the chart page →

42,584
jellystatdjjudas21Verified publisher1.0.11 of 1See more

jellystat djjudas21 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.12e61c759ec706
compression@1.8.1
1.8.2

Open the chart page →

2,084
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
compression@1.7.4
1.8.2

Open the chart page →

75,225
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
compression@1.8.0
1.8.2

Open the chart page →

35,965
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
compression@1.7.4
1.8.2

Open the chart page →

13,128
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
compression@1.7.4
1.8.2

Open the chart page →

24,215
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
compression@1.7.4
1.8.2

Open the chart page →

4,975
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
compression@1.7.4
1.8.2

Open the chart page →

8,710
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
compression@1.7.4
1.8.2

Open the chart page →

6,582
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
compression@1.7.4
1.8.2

Open the chart page →

4,542
ghostgroundhog2k0.212.151 of 1See more

ghost groundhog2k 0.212.15

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2

Open the chart page →

2,130
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
compression@1.8.1
1.8.2

Open the chart page →

926
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
compression@1.8.1
1.8.2

Open the chart page →

34,014
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
compression@1.7.4
1.8.2

Open the chart page →

5,249
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
compression@1.8.1
1.8.2

Open the chart page →

18,204

Container images carrying it

218 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.8cfe2704ff858
compression@1.8.1
1.8.2
1
n8nio/n8n:1.33.1dd171d45102a
compression@1.7.4
1.8.2
1
n8nio/n8n:0.136.0e8302e8bd402
compression@1.7.4
1.8.2
1
n8nio/n8n:1.115.1ed16e560c40e
compression@1.8.1
1.8.2
1
n8nio/n8n:2.41.3fdce8f852ac7
compression@1.8.1
1.8.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
compression@1.7.4
1.8.2
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
compression@1.7.4
1.8.2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
compression@1.7.4
1.8.2
1
nocodb/nocodb:0.301.5d9516f0bf546
compression@1.8.1
1.8.2
1
nonkronk/tristian-id:latest0a3694d70647
compression@1.7.3
1.8.2
1
ondrejsika/parking:latestb1fd497416c8
compression@1.7.4
1.8.2
1
ooghenekaro/amazon:latest03394ba1d6d8
compression@1.7.4
1.8.2
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
compression@1.7.4
1.8.2
1
polonel/trudesk:1.2.60cf6513f6fe3
compression@1.7.4
1.8.2
1
praecoapp/praeco:1.8.1322be3218d7df
compression@1.7.4
1.8.2
1
requarks/wiki:canary-2.5.2438b5865a7386c
compression@1.7.4
1.8.2
1
requarks/wiki:2af71a17dc27c
compression@1.8.1
1.8.2
1
rlex/jsonvisio:1.9.5cd50ff65118e
compression@1.7.4
1.8.2
1
roadiehq/community-backstage-image:latestef355bf5b639
compression@1.7.4
1.8.2
1
samajh/alprfrontend:latest05ef4fddbb75
compression@1.7.4
1.8.2
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
compression@1.7.4
1.8.2
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
compression@1.7.4
1.8.2
1
soulou2019/node-server:latest5e6ecfcc109e
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.26.379f14a2bf931
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
compression@1.7.4
1.8.2
1
supporttools/uptime-kuma:v2.6f8a49ed65809
compression@1.7.4
1.8.2
1
svenwal/jsonplaceholder:latestba2f285af432
compression@1.7.4
1.8.2
1
tensorzero/ui:2026.6.0f2563d54724e
compression@1.8.1
1.8.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
compression@1.7.4
1.8.2
1
thingsboard/tb-web-ui:3.4.157f98ed53b3d
compression@1.7.4
1.8.2
1
thingsboard/tb-web-ui:3.6.0d388378062cc
compression@1.7.4
1.8.2
1
treskon/portrait-ui:DEV-lateste7970783bc8d
compression@1.8.0
1.8.2
1
tvanro/prerender-alpine:6.4.06909015f0328
compression@1.7.4
1.8.2
1
tzahi12345/youtubedl-material:4.23720b856bd2f
compression@1.7.4
1.8.2
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
compression@1.7.4
1.8.2
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
compression@1.8.1
1.8.2
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
compression@1.7.4
1.8.2
1
unleashorg/unleash-server:7.5.09adb37e399ba
compression@1.8.1
1.8.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
compression@1.7.4
1.8.2
1
veecode/devportal881f936ff4a3
compression@1.8.1
1.8.2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
compression@1.7.4
1.8.2
1
vlebediantsev/notes-project-front:latest945675fd2636
compression@1.7.4
1.8.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.