StackRadar

CVE-2026-87776

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
231
of 18,026 indexed, latest versions
Container images
218
deployed by those charts
Fix available
1 of 1
affected package

compression vulnerable to Denial of Service via memory leak on premature response close

Carried by container images the latest versions of 231 of 18,026 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
compressionnpm1.5.2, 1.6.2, 1.7.1, 1.7.3+4 more1.8.2218
OSV records
GHSA-vc2v-76pw-4v95

Charts affected

231 by stars
ChartLatestAffected imagesRadar Score
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
compression@1.7.4
1.8.2

Open the chart page →

3,377
plane-enterprisemakeplaneOfficialVerified publisher3.10.22 of 13See more

plane-enterprise makeplane 3.10.2

2 of the 13 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
compression@1.8.1
1.8.2
makeplane/space-commercial:v3.3.03dba6a659fb9
compression@1.8.1
1.8.2

Open the chart page →

6,161
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
compression@1.7.4
1.8.2

Open the chart page →

6,120
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
compression@1.8.1
1.8.2

Open the chart page →

3,835
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
compression@1.7.3
1.8.2

Open the chart page →

3,599
tristian-idnonkronk0.1.31 of 1See more

tristian-id nonkronk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
nonkronk/tristian-id:latest0a3694d70647
compression@1.7.3
1.8.2

Open the chart page →

1,173
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
growthbook/growthbook:latest67b7cd7d12a1
compression@1.8.1
1.8.2

Open the chart page →

1,550
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
compression@1.8.0
1.8.2

Open the chart page →

7,957
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
compression@1.8.1
1.8.2

Open the chart page →

8,241
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
compression@1.7.4
1.8.2
treskon/portrait-ui:DEV-lateste7970783bc8d
compression@1.8.0
1.8.2

Open the chart page →

36,111
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
compression@1.8.0
1.8.2

Open the chart page →

3,389
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
compression@1.8.1
1.8.2

Open the chart page →

42,559
immichsecustorVerified publisher2.0.71 of 1See more

immich secustor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
compression@1.8.1
1.8.2

Open the chart page →

3,343
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
compression@1.7.4
1.8.2

Open the chart page →

11,845
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
compression@1.7.4
1.8.2

Open the chart page →

8,751
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
compression@1.7.4
1.8.2

Open the chart page →

13,666
prerenderutkuozdemirVerified publisher1.1.21 of 1See more

prerender utkuozdemir 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tvanro/prerender-alpine:6.4.06909015f0328
compression@1.7.4
1.8.2

Open the chart page →

2,745
restreamerutkuozdemirVerified publisher1.1.01 of 1See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
datarhei/restreamer:0.6.4655e12f9eeed
compression@1.7.4
1.8.2

Open the chart page →

3,166
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
compression@1.8.1
1.8.2

Open the chart page →

2,599
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
compression@1.7.4
1.8.2

Open the chart page →

2,288
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
compression@1.7.4
1.8.2

Open the chart page →

10,814
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
soulou2019/node-server:latest5e6ecfcc109e
compression@1.7.4
1.8.2

Open the chart page →

3,526
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
compression@1.8.1
1.8.2

Open the chart page →

1,596
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
compression@1.8.1
1.8.2

Open the chart page →

34,025
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
compression@1.7.4
1.8.2

Open the chart page →

3,744
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
compression@1.7.4
1.8.2

Open the chart page →

3,446
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
compression@1.7.4
1.8.2

Open the chart page →

2,719
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
compression@1.7.4
1.8.2

Open the chart page →

2,763
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
compression@1.7.4
1.8.2

Open the chart page →

2,932
assemblylineassemblylineVerified publisher7.4.211 of 12See more

assemblyline assemblyline 7.4.21

1 of the 12 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
cccs/assemblyline-ui-frontend:4.7.4.stable21c00e72d90666
compression@1.8.1
1.8.2

Open the chart page →

14,416
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
compression@1.7.4
1.8.2
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

92,801
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
wettyoss/wetty:latestc52dac712353
compression@1.8.1
1.8.2

Open the chart page →

7,524
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
compression@1.8.1
1.8.2

Open the chart page →

2,619
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
compression@1.8.1
1.8.2

Open the chart page →

7,816
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
compression@1.5.2
1.8.2

Open the chart page →

4,629
ghostchart-ghost0.1.61 of 2See more

ghost chart-ghost 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
library/ghost:6.65.0-alpine3.23fea3264f902e
compression@1.8.1
1.8.2

Open the chart page →

1,762
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
compression@1.7.4
1.8.2

Open the chart page →

26,458
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
compression@1.7.5
1.8.2
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
compression@1.8.0
1.8.2
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
compression@1.8.0
1.8.2

Open the chart page →

22,248
stocksalescluster-deploy0.1.31 of 1See more

stocksales cluster-deploy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
foggbh/stocky:latest8b7a2e5ecf4e
compression@1.8.1
1.8.2

Open the chart page →

596
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2

Open the chart page →

5,761
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
compression@1.7.4
1.8.2

Open the chart page →

15,492
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
compression@1.7.4
1.8.2

Open the chart page →

11,917
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
compression@1.8.0
1.8.2

Open the chart page →

16,312
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2

Open the chart page →

5,345
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
compression@1.7.4
1.8.2

Open the chart page →

5,270
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2

Open the chart page →

34,165
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
compression@1.7.4
1.8.2

Open the chart page →

4,324
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-87776.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
compression@1.8.1
1.8.2

Open the chart page →

2,147

Container images carrying it

218 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
compression@1.7.4
1.8.2
3
pantsel/konga:latestc8172b75607d
compression@1.6.2
1.8.2
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
compression@1.7.4
1.8.2
3
verdaccio/verdaccio:6.10.5560744912b64
compression@1.8.1
1.8.2
3
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
compression@1.8.1
1.8.2
3
chatwoot/chatwoot:v3.1.0d530ab8c1753
compression@1.7.4
1.8.2
2
governify/registry:v3.4.0d3f37f4f8168
compression@1.7.4
1.8.2
2
governify/render:v2.2.0daeca1ce28e6
compression@1.7.4
1.8.2
2
governify/reporter:v2.2.038595913458f
compression@1.7.4
1.8.2
2
library/ghost:6.67.0428ce627d581
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:2.5.4917318f9d7be
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:1.23.1396510915e6be
compression@1.7.4
1.8.2
2
louislam/uptime-kuma:2.3.29aeb4e51d038
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
compression@1.8.1
1.8.2
2
louislam/uptime-kuma:2.5.5c74379ac4509
compression@1.8.1
1.8.2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
compression@1.7.4
1.8.2
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
compression@1.7.4
1.8.2
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
compression@1.7.4
1.8.2
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
compression@1.8.1
1.8.2
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
compression@1.8.0
1.8.2
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
compression@1.7.4
1.8.2
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
compression@1.8.1
1.8.2
2
n8nio/n8n:2.36.714c4285bc303
compression@1.8.1
1.8.2
2
requarks/wiki:latestfffff288a52f
compression@1.8.1
1.8.2
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
compression@1.8.1
1.8.2
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
compression@1.7.4
1.8.2
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
compression@1.7.4
1.8.2
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
compression@1.8.1
1.8.2
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
compression@1.7.4
1.8.2
2
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
compression@1.8.0
1.8.2
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
compression@1.7.4
1.8.2
2
0hlov3/semaphore:v1.0.050f874ec096b
compression@1.7.4
1.8.2
1
apimap/developer:v1.3.1406d3858e20c
compression@1.7.4
1.8.2
1
apimap/portal:v2.4.0041a4790c65c
compression@1.7.4
1.8.2
1
arfath29/3-tier-app-frontend:latest384b3e377f47
compression@1.7.4
1.8.2
1
assistiot/open_api_frontend:1.0.1f11d82defc70
compression@1.7.4
1.8.2
1
baserow/baserow:1.30.1df0c42eb67e8
compression@1.7.4
1.8.2
1
catalysm/csmm:lateste8e3d06f1d70
compression@1.7.1
1.8.2
1
cccs/assemblyline-ui-frontend:4.7.4.stable21c00e72d90666
compression@1.8.1
1.8.2
1
ccjacobs14/amazon:59a9b14a6f09e
compression@1.7.4
1.8.2
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
compression@1.7.4
1.8.2
1
codercom/code-server:4.11.0-debian1e2cc688008e
compression@1.7.4
1.8.2
1
codercom/code-server:3.10.247605610ad8d
compression@1.7.4
1.8.2
1
coldatom/containers-security-front:latest7c2fbbb41bcf
compression@1.7.4
1.8.2
1
conduction/conduction-ui-app:devd591f5e6f2a9
compression@1.7.4
1.8.2
1
cyfershepard/jellystat:1.1.12e61c759ec706
compression@1.8.1
1.8.2
1
datarhei/restreamer:0.6.4655e12f9eeed
compression@1.7.4
1.8.2
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
compression@1.7.4
1.8.2
1
enketo/enketo-express:3.0.4dcad9c2273f6
compression@1.7.4
1.8.2
1
evoapicloud/evolution-api:latest966625532d90
compression@1.8.1
1.8.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.