StackRadar

CVE-2026-92000

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
62
of 17,957 indexed, latest versions
Container images
52
deployed by those charts
Fix available
1 of 1
affected package

adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0

Carried by container images the latest versions of 62 of 17,957 indexed charts deploy, on 52 images.

Affected packageAffected versionsFixed inImages
adm-zipnpm0.4.11, 0.4.13, 0.4.16, 0.5.3+9 more0.6.152
OSV records
GHSA-rcw4-f5rp-g42v

Charts affected

62 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.421 of 1See more

n8n community-charts 1.24.42

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:2.40.59f693fd55655
adm-zip@0.6.0
0.6.1

Open the chart page →

1,076
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
0.6.1

Open the chart page →

1,441
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.1

Open the chart page →

6,067
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
adm-zip@0.6.0
0.6.1

Open the chart page →

1,114
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.1

Open the chart page →

2,718
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.1

Open the chart page →

2,992
etherpadnicholaswildeVerified publisher1.0.21 of 1See more

etherpad nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
adm-zip@0.5.5
0.6.1

Open the chart page →

4,233
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

1,223
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.1

Open the chart page →

1,915
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.1

Open the chart page →

704
libredb-studiolibredb-studioVerified publisher0.1.721 of 1See more

libredb-studio libredb-studio 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
adm-zip@0.6.0
0.6.1

Open the chart page →

1,172
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.1

Open the chart page →

2,653
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
adm-zip@0.6.0
0.6.1

Open the chart page →

1,739
joplin-serverdjjudas21Verified publisher6.0.01 of 1See more

joplin-server djjudas21 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
joplin/server:3.7.23f7b852959aa
adm-zip@0.5.17
0.6.1

Open the chart page →

2,858
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
adm-zip@0.5.16
0.6.1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
adm-zip@0.5.16
0.6.1

Open the chart page →

33,660
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.1

Open the chart page →

4,481
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.1

Open the chart page →

5,379
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.1

Open the chart page →

3,070
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.1

Open the chart page →

33,687
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.1

Open the chart page →

6,073
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.1

Open the chart page →

5,179
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.1

Open the chart page →

1,438
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.1

Open the chart page →

3,369
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.1

Open the chart page →

9,696
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.1

Open the chart page →

2,731
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

23,432
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1

Open the chart page →

2,395
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.1

Open the chart page →

3,472
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1

Open the chart page →

4,887
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
adm-zip@0.5.16
0.6.1

Open the chart page →

29,747
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.1

Open the chart page →

14,004
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
infisical/infisical:latest3365445909be
adm-zip@0.5.12
0.6.1

Open the chart page →

2,955
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.1

Open the chart page →

5,125
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.1

Open the chart page →

6,455
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.1

Open the chart page →

1,639
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.1

Open the chart page →

3,556
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.1

Open the chart page →

2,806
libredb-studiolibredb-studio-oci0.1.721 of 1See more

libredb-studio libredb-studio-oci 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
adm-zip@0.6.0
0.6.1

Open the chart page →

1,172
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.1

Open the chart page →

1,688
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1

Open the chart page →

1,441
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.1

Open the chart page →

2,657
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1

Open the chart page →

1,441
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
etherpad/etherpad:latest98d395769b3b
adm-zip@0.5.18
0.6.1

Open the chart page →

255
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1

Open the chart page →

1,223
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.1

Open the chart page →

2,047
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.1

Open the chart page →

5,441
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1

Open the chart page →

20,302
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1

Open the chart page →

16,987
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.1

Open the chart page →

5,751
etherpadschoenwald0.4.11 of 1See more

etherpad schoenwald 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-92000.

Container imageDigestPackageFixed in
etherpad/etherpad:3.3.698d395769b3b
adm-zip@0.5.18
0.6.1

Open the chart page →

255

Container images carrying it

52 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
adm-zip@0.5.10
0.6.1
4
joplin/server:3.7.2:latest3f7b852959aa
adm-zip@0.5.17
0.6.1
3
etherpad/etherpad:3.3.6:latest98d395769b3b
adm-zip@0.5.18
0.6.1
2
ethersphere/bee-localchain:latest0558799ca992
adm-zip@0.4.16
0.6.1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
adm-zip@0.4.16
0.6.1
2
n8nio/n8n:2.36.714c4285bc303
adm-zip@0.6.0
0.6.1
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
adm-zip@0.5.10
0.6.1
2
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
adm-zip@0.6.0
0.6.1
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
adm-zip@0.5.16
0.6.1
1
assistiot/fl_orchestrator:api-latest7473d77448e1
adm-zip@0.5.12
0.6.1
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
adm-zip@0.5.12
0.6.1
1
decayofmind/hubot:3.3.21e18e92fe694
adm-zip@0.4.13
0.6.1
1
diygod/rsshub:latest22845ada2f14
adm-zip@0.6.0
0.6.1
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
adm-zip@0.4.16
0.6.1
1
ethersphere/bzz-token-service:latest7624f11a72ad
adm-zip@0.4.16
0.6.1
1
gristlabs/grist:0.7.96e71b1914a7e
adm-zip@0.5.3
0.6.1
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
adm-zip@0.5.10
0.6.1
1
heywood8/redisinsight:2.28.00bc9ab313d37
adm-zip@0.5.10
0.6.1
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
adm-zip@0.4.16
0.6.1
1
infisical/infisical:latest:v0.165.602082bf13163
adm-zip@0.5.12
0.6.1
1
infisical/infisical:latest3365445909be
adm-zip@0.5.12
0.6.1
1
kyso/kyso-front:lateste52595c5c16f
adm-zip@0.5.10
0.6.1
1
library/ghost:4.37.0767230c0f263
adm-zip@0.5.5
0.6.1
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
adm-zip@0.5.10
0.6.1
1
minddocdev/hubot:0.1.96c60b11a4fa7
adm-zip@0.4.11
0.6.1
1
n8nio/n8n:2.25.7761374d4eb84
adm-zip@0.5.16
0.6.1
1
n8nio/n8n:1.86.08b39ed5a2de9
adm-zip@0.5.16
0.6.1
1
n8nio/n8n:2.40.59f693fd55655
adm-zip@0.6.0
0.6.1
1
n8nio/n8n:2.36.8cfe2704ff858
adm-zip@0.6.0
0.6.1
1
n8nio/n8n:1.33.1dd171d45102a
adm-zip@0.5.12
0.6.1
1
n8nio/n8n:1.115.1ed16e560c40e
adm-zip@0.5.10
0.6.1
1
n8nio/n8n:2.41.3fdce8f852ac7
adm-zip@0.6.0
0.6.1
1
polonel/trudesk:1.2.60cf6513f6fe3
adm-zip@0.5.9
0.6.1
1
redis/redisinsight:2.68019fcf774631
adm-zip@0.5.10
0.6.1
1
redis/redisinsight:3.2.055542a762210
adm-zip@0.5.10
0.6.1
1
redis/redisinsight:2.46699d341bd329
adm-zip@0.5.10
0.6.1
1
redis/redisinsight:3.485562d67a912
adm-zip@0.5.10
0.6.1
1
rocketadmin/rocketadmin:1.17.710955ef540b9
adm-zip@0.5.17
0.6.1
1
samajh/alprbackend:latestea742b4372ad
adm-zip@0.5.9
0.6.1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
adm-zip@0.5.10
0.6.1
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
adm-zip@0.5.18
0.6.1
1
sqlpad/sqlpad:6.7d3d2f430dffd
adm-zip@0.5.5
0.6.1
1
treskon/portrait-ui:DEV-lateste7970783bc8d
adm-zip@0.5.10
0.6.1
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
adm-zip@0.5.15
0.6.1
1
ghcr.io/ajnart/homarr:lateste103abadfb52
adm-zip@0.5.15
0.6.1
1
ghcr.io/colanode/server:latest7006cac874fd
adm-zip@0.5.17
0.6.1
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
adm-zip@0.5.16
0.6.1
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
adm-zip@0.5.16
0.6.1
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
adm-zip@0.5.18
0.6.1
1
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
adm-zip@0.5.5
0.6.1
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.