StackRadar

CVE-2026-87776

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
231
of 18,026 indexed, latest versions
Container images
218
deployed by those charts
Fix available
1 of 1
affected package

compression vulnerable to Denial of Service via memory leak on premature response close

Carried by container images the latest versions of 231 of 18,026 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
compressionnpm1.5.2, 1.6.2, 1.7.1, 1.7.3+4 more1.8.2218
OSV records
GHSA-vc2v-76pw-4v95

Charts affected

231 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
compression@1.8.1
1.8.2

Open the chart page →

1,398
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
compression@1.8.1
1.8.2

Open the chart page →

2,259
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2

Open the chart page →

34,165
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
compression@1.7.4
1.8.2

Open the chart page →

18,087
unleashunleash5.6.81 of 2See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
unleashorg/unleash-server:7.5.09adb37e399ba
compression@1.8.1
1.8.2

Open the chart page →

2,330
verdaccioverdaccio4.35.21 of 1See more

verdaccio verdaccio 4.35.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
verdaccio/verdaccio:6.10.5560744912b64
compression@1.8.1
1.8.2

Open the chart page →

327
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
compression@1.7.4
1.8.2

Open the chart page →

7,980
wekanwekanVerified publisher12.18.01 of 3See more

wekan wekan 12.18.0

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wekan/wekan:v12.1824acf0b88240
compression@1.7.4
1.8.2

Open the chart page →

1,626
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
compression@1.7.4
1.8.2

Open the chart page →

6,261
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2

Open the chart page →

3,948
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
compression@1.7.4
1.8.2

Open the chart page →

6,312
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
compression@1.8.1
1.8.2

Open the chart page →

1,744
n8nlinogicsVerified publisher0.136.01 of 1See more

n8n linogics 0.136.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:0.136.0e8302e8bd402
compression@1.7.4
1.8.2

Open the chart page →

7,582
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
compression@1.7.4
1.8.2

Open the chart page →

13,329
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
compression@1.7.4
1.8.2

Open the chart page →

2,602
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
compression@1.7.4
1.8.2

Open the chart page →

5,691
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
compression@1.7.4
1.8.2

Open the chart page →

5,610
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
compression@1.7.4
1.8.2

Open the chart page →

10,546
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
compression@1.7.4
1.8.2

Open the chart page →

6,275
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
compression@1.7.4
1.8.2

Open the chart page →

3,381
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
compression@1.7.4
1.8.2

Open the chart page →

3,280
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
compression@1.7.4
1.8.2

Open the chart page →

8,932
ghostcloudpirates-ghostVerified publisher0.20.281 of 3See more

ghost cloudpirates-ghost 0.20.28

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2

Open the chart page →

8,355
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
compression@1.7.4
1.8.2

Open the chart page →

17,283
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
compression@1.7.4
1.8.2

Open the chart page →

2,762
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
compression@1.7.4
1.8.2

Open the chart page →

9,161
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher2.0.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:main8da4c9948421
compression@1.8.1
1.8.2

Open the chart page →

1,513
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

5,345
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
compression@1.7.4
1.8.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
compression@1.7.4
1.8.2

Open the chart page →

23,691
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
compression@1.7.4
1.8.2

Open the chart page →

8,503
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2

Open the chart page →

1,450
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
thingsboard/tb-web-ui:3.6.0d388378062cc
compression@1.7.4
1.8.2

Open the chart page →

17,514
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
compression@1.8.1
1.8.2

Open the chart page →

5,210
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
compression@1.8.1
1.8.2

Open the chart page →

988
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
compression@1.7.4
1.8.2

Open the chart page →

1,591
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
compression@1.7.4
1.8.2
ghcr.io/data-fair/metrics:0a8d40779eeae
compression@1.7.4
1.8.2
ghcr.io/data-fair/notify:3c739b74dabb0
compression@1.8.0
1.8.2
ghcr.io/data-fair/portals:18b621866ceb2
compression@1.8.1
1.8.2
ghcr.io/data-fair/processings:15a9216989707
compression@1.7.4
1.8.2
ghcr.io/data-fair/simple-directory:438a4f32fad82
compression@1.7.4
1.8.2

Open the chart page →

42,584
jellystatdjjudas21Verified publisher1.0.11 of 1See more

jellystat djjudas21 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.12e61c759ec706
compression@1.8.1
1.8.2

Open the chart page →

2,084
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
compression@1.7.4
1.8.2

Open the chart page →

75,225
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
compression@1.8.0
1.8.2

Open the chart page →

35,965
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
compression@1.7.4
1.8.2

Open the chart page →

13,128
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
compression@1.7.4
1.8.2

Open the chart page →

24,215
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
compression@1.7.4
1.8.2

Open the chart page →

4,975
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
compression@1.7.4
1.8.2

Open the chart page →

8,710
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
compression@1.7.4
1.8.2

Open the chart page →

6,582
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
compression@1.7.4
1.8.2

Open the chart page →

4,542
ghostgroundhog2k0.212.151 of 1See more

ghost groundhog2k 0.212.15

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2

Open the chart page →

2,130
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
compression@1.8.1
1.8.2

Open the chart page →

926
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
compression@1.8.1
1.8.2

Open the chart page →

34,014
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
compression@1.7.4
1.8.2

Open the chart page →

5,249
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
compression@1.8.1
1.8.2

Open the chart page →

18,204

Container images carrying it

218 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
compression@1.7.4
1.8.2
1
wekanteam/wekan:v4.2268a51f0327df
compression@1.7.1
1.8.2
1
wettyoss/wetty:latestc52dac712353
compression@1.8.1
1.8.2
1
winfred008/amazon:910a68de5b398
compression@1.7.4
1.8.2
1
wiremind/scrapoxy:lateste7048929a676
compression@1.7.4
1.8.2
1
yooooomi/your_spotify_client:1.20.0e4da90a0634c
compression@1.8.1
1.8.2
1
zazuko/trifid:2.3.7054be137de70
compression@1.7.4
1.8.2
1
zwavejs/zwave-js-ui:11.24.2717f9d260902
compression@1.8.1
1.8.2
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
compression@1.8.1
1.8.2
1
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
compression@1.8.1
1.8.2
1
ghcr.io/bluesky-social/pds:0.405e164855fa1
compression@1.8.1
1.8.2
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
compression@1.8.1
1.8.2
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
compression@1.8.1
1.8.2
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
compression@1.7.4
1.8.2
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
compression@1.8.0
1.8.2
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
compression@1.7.3
1.8.2
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
compression@1.7.3
1.8.2
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
compression@1.7.1
1.8.2
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
compression@1.7.3
1.8.2
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
compression@1.7.4
1.8.2
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
compression@1.7.4
1.8.2
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
compression@1.7.4
1.8.2
1
ghcr.io/data-fair/metrics:0a8d40779eeae
compression@1.7.4
1.8.2
1
ghcr.io/data-fair/notify:3c739b74dabb0
compression@1.8.0
1.8.2
1
ghcr.io/data-fair/portals:18b621866ceb2
compression@1.8.1
1.8.2
1
ghcr.io/data-fair/processings:15a9216989707
compression@1.7.4
1.8.2
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
compression@1.7.4
1.8.2
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
compression@1.8.0
1.8.2
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
compression@1.7.5
1.8.2
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
compression@1.8.0
1.8.2
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
compression@1.8.0
1.8.2
1
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
compression@1.8.1
1.8.2
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
compression@1.7.4
1.8.2
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
compression@1.8.1
1.8.2
1
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
compression@1.8.1
1.8.2
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
compression@1.8.1
1.8.2
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
compression@1.7.4
1.8.2
1
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
compression@1.7.4
1.8.2
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
compression@1.7.4
1.8.2
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
compression@1.7.4
1.8.2
1
ghcr.io/linuxserver/filezilla:version-3.51.0-r15103cdd266ce
compression@1.7.4
1.8.2
1
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
compression@1.7.4
1.8.2
1
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
compression@1.7.3
1.8.2
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
compression@1.7.4
1.8.2
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
compression@1.7.4
1.8.2
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
compression@1.7.4
1.8.2
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
compression@1.7.4
1.8.2
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
compression@1.7.4
1.8.2
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
compression@1.7.4
1.8.2
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
compression@1.8.1
1.8.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.