StackRadar

CVE-2026-87776

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
231
of 18,026 indexed, latest versions
Container images
218
deployed by those charts
Fix available
1 of 1
affected package

compression vulnerable to Denial of Service via memory leak on premature response close

Carried by container images the latest versions of 231 of 18,026 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
compressionnpm1.5.2, 1.6.2, 1.7.1, 1.7.3+4 more1.8.2218
OSV records
GHSA-vc2v-76pw-4v95

Charts affected

231 by stars
ChartLatestAffected imagesRadar Score
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
compression@1.7.4
1.8.2

Open the chart page →

3,377
plane-enterprisemakeplaneOfficialVerified publisher3.10.22 of 13See more

plane-enterprise makeplane 3.10.2

2 of the 13 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
compression@1.8.1
1.8.2
makeplane/space-commercial:v3.3.03dba6a659fb9
compression@1.8.1
1.8.2

Open the chart page →

6,161
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
compression@1.7.4
1.8.2

Open the chart page →

6,120
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
compression@1.8.1
1.8.2

Open the chart page →

3,835
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
compression@1.7.3
1.8.2

Open the chart page →

3,599
tristian-idnonkronk0.1.31 of 1See more

tristian-id nonkronk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nonkronk/tristian-id:latest0a3694d70647
compression@1.7.3
1.8.2

Open the chart page →

1,173
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
growthbook/growthbook:latest67b7cd7d12a1
compression@1.8.1
1.8.2

Open the chart page →

1,550
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
compression@1.8.0
1.8.2

Open the chart page →

7,957
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
compression@1.8.1
1.8.2

Open the chart page →

8,241
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
compression@1.7.4
1.8.2
treskon/portrait-ui:DEV-lateste7970783bc8d
compression@1.8.0
1.8.2

Open the chart page →

36,111
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
compression@1.8.0
1.8.2

Open the chart page →

3,389
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
compression@1.8.1
1.8.2

Open the chart page →

42,559
immichsecustorVerified publisher2.0.71 of 1See more

immich secustor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
compression@1.8.1
1.8.2

Open the chart page →

3,343
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
compression@1.7.4
1.8.2

Open the chart page →

11,845
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
compression@1.7.4
1.8.2

Open the chart page →

8,751
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
compression@1.7.4
1.8.2

Open the chart page →

13,666
prerenderutkuozdemirVerified publisher1.1.21 of 1See more

prerender utkuozdemir 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tvanro/prerender-alpine:6.4.06909015f0328
compression@1.7.4
1.8.2

Open the chart page →

2,745
restreamerutkuozdemirVerified publisher1.1.01 of 1See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
datarhei/restreamer:0.6.4655e12f9eeed
compression@1.7.4
1.8.2

Open the chart page →

3,166
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
compression@1.8.1
1.8.2

Open the chart page →

2,599
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
compression@1.7.4
1.8.2

Open the chart page →

2,288
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
compression@1.7.4
1.8.2

Open the chart page →

10,814
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
soulou2019/node-server:latest5e6ecfcc109e
compression@1.7.4
1.8.2

Open the chart page →

3,526
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
compression@1.8.1
1.8.2

Open the chart page →

1,596
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
compression@1.8.1
1.8.2

Open the chart page →

34,025
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
compression@1.7.4
1.8.2

Open the chart page →

3,744
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
compression@1.7.4
1.8.2

Open the chart page →

3,446
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
compression@1.7.4
1.8.2

Open the chart page →

2,719
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
compression@1.7.4
1.8.2

Open the chart page →

2,763
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
compression@1.7.4
1.8.2

Open the chart page →

2,932
assemblylineassemblylineVerified publisher7.4.211 of 12See more

assemblyline assemblyline 7.4.21

1 of the 12 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
cccs/assemblyline-ui-frontend:4.7.4.stable21c00e72d90666
compression@1.8.1
1.8.2

Open the chart page →

14,416
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
compression@1.7.4
1.8.2
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

92,801
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
wettyoss/wetty:latestc52dac712353
compression@1.8.1
1.8.2

Open the chart page →

7,524
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
compression@1.8.1
1.8.2

Open the chart page →

2,619
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
compression@1.8.1
1.8.2

Open the chart page →

7,816
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
compression@1.5.2
1.8.2

Open the chart page →

4,629
ghostchart-ghost0.1.61 of 2See more

ghost chart-ghost 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.65.0-alpine3.23fea3264f902e
compression@1.8.1
1.8.2

Open the chart page →

1,762
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
compression@1.7.4
1.8.2

Open the chart page →

26,458
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
compression@1.7.5
1.8.2
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
compression@1.8.0
1.8.2
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
compression@1.8.0
1.8.2

Open the chart page →

22,248
stocksalescluster-deploy0.1.31 of 1See more

stocksales cluster-deploy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
foggbh/stocky:latest8b7a2e5ecf4e
compression@1.8.1
1.8.2

Open the chart page →

596
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
compression@1.7.4
1.8.2

Open the chart page →

15,492
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
compression@1.7.4
1.8.2

Open the chart page →

11,917
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
compression@1.8.0
1.8.2

Open the chart page →

16,312
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

5,345
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
compression@1.7.4
1.8.2

Open the chart page →

5,270
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2

Open the chart page →

34,165
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
compression@1.7.4
1.8.2

Open the chart page →

4,324
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
compression@1.8.1
1.8.2

Open the chart page →

2,147

Container images carrying it

218 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.8cfe2704ff858
compression@1.8.1
1.8.2
1
n8nio/n8n:1.33.1dd171d45102a
compression@1.7.4
1.8.2
1
n8nio/n8n:0.136.0e8302e8bd402
compression@1.7.4
1.8.2
1
n8nio/n8n:1.115.1ed16e560c40e
compression@1.8.1
1.8.2
1
n8nio/n8n:2.41.3fdce8f852ac7
compression@1.8.1
1.8.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
compression@1.7.4
1.8.2
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
compression@1.7.4
1.8.2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
compression@1.7.4
1.8.2
1
nocodb/nocodb:0.301.5d9516f0bf546
compression@1.8.1
1.8.2
1
nonkronk/tristian-id:latest0a3694d70647
compression@1.7.3
1.8.2
1
ondrejsika/parking:latestb1fd497416c8
compression@1.7.4
1.8.2
1
ooghenekaro/amazon:latest03394ba1d6d8
compression@1.7.4
1.8.2
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
compression@1.7.4
1.8.2
1
polonel/trudesk:1.2.60cf6513f6fe3
compression@1.7.4
1.8.2
1
praecoapp/praeco:1.8.1322be3218d7df
compression@1.7.4
1.8.2
1
requarks/wiki:canary-2.5.2438b5865a7386c
compression@1.7.4
1.8.2
1
requarks/wiki:2af71a17dc27c
compression@1.8.1
1.8.2
1
rlex/jsonvisio:1.9.5cd50ff65118e
compression@1.7.4
1.8.2
1
roadiehq/community-backstage-image:latestef355bf5b639
compression@1.7.4
1.8.2
1
samajh/alprfrontend:latest05ef4fddbb75
compression@1.7.4
1.8.2
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
compression@1.7.4
1.8.2
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
compression@1.7.4
1.8.2
1
soulou2019/node-server:latest5e6ecfcc109e
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.26.379f14a2bf931
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
compression@1.7.4
1.8.2
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
compression@1.7.4
1.8.2
1
supporttools/uptime-kuma:v2.6f8a49ed65809
compression@1.7.4
1.8.2
1
svenwal/jsonplaceholder:latestba2f285af432
compression@1.7.4
1.8.2
1
tensorzero/ui:2026.6.0f2563d54724e
compression@1.8.1
1.8.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
compression@1.7.4
1.8.2
1
thingsboard/tb-web-ui:3.4.157f98ed53b3d
compression@1.7.4
1.8.2
1
thingsboard/tb-web-ui:3.6.0d388378062cc
compression@1.7.4
1.8.2
1
treskon/portrait-ui:DEV-lateste7970783bc8d
compression@1.8.0
1.8.2
1
tvanro/prerender-alpine:6.4.06909015f0328
compression@1.7.4
1.8.2
1
tzahi12345/youtubedl-material:4.23720b856bd2f
compression@1.7.4
1.8.2
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
compression@1.7.4
1.8.2
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
compression@1.8.1
1.8.2
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
compression@1.7.4
1.8.2
1
unleashorg/unleash-server:7.5.09adb37e399ba
compression@1.8.1
1.8.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
compression@1.7.4
1.8.2
1
veecode/devportal881f936ff4a3
compression@1.8.1
1.8.2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
compression@1.7.4
1.8.2
1
vlebediantsev/notes-project-front:latest945675fd2636
compression@1.7.4
1.8.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.