StackRadar

CVE-2026-22184

High

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
846
of 17,790 indexed, latest versions
Container images
884
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 846 of 17,790 indexed charts deploy, on 884 images.

Affected packageAffected versionsFixed inImages
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r21.3.2-r0884
OSV records
ALPINE-CVE-2026-22184

Charts affected

846 by stars
ChartLatestAffected imagesRadar Score
security-smellssecurity-smells0.1.01 of 1See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
durellirsd/security-smells-api:v17398aca4fc2e
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,424
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

840
service-exampleservice-example-jt0.1.14 of 9See more

service-example service-example-jt 0.1.1

4 of the 9 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
library/nats:2.12.2-alpine2d5fce3229ae
zlib@1.3.1-r2
1.3.2-r0
natsio/nats-box:0.19.28031d190c7ee
zlib@1.3.1-r2
1.3.2-r0
natsio/nats-server-config-reloader:0.20.147094fcae2f4
zlib@1.3.1-r2
1.3.2-r0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,105
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,292
ccx-monitoringseveralnines0.6.213 of 7See more

ccx-monitoring severalnines 0.6.21

3 of the 7 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
zlib@1.3.1-r2
1.3.2-r0
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
zlib@1.3.1-r2
1.3.2-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,709
shopsyncshopsyncVerified publisher1.0.01 of 1See more

shopsync shopsync 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
shyamkrishna21/shopsync:latest3998b83def53
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,088
shopwareshopware-storeVerified publisher2.1.21See more

shopware shopware-store 2.1.2

1 container image this version deploys carries CVE-2026-22184.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-alpha.738e467b32af3f
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

—
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,691
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,675
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,322
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,322
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,020
moksi-gitops0.16.41 of 2See more

mok si-gitops 0.16.4

1 of the 2 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

664
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,729
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

643
simple-node-expresssimple-node-express1.0.01 of 1See more

simple-node-express simple-node-express 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
devravinder/node-express-app:1.0.05325a96967b5
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

752
tabixsinextraVerified publisher0.2.21 of 1See more

tabix sinextra 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,249
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

2,429
smtp-gotifysmtp-gotifyVerified publisher0.1.41 of 1See more

smtp-gotify smtp-gotify 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

562
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,330
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,326
cost-analyzersoftonic2.5.52 of 6See more

cost-analyzer softonic 2.5.5

2 of the 6 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
zlib@1.3.1-r1
1.3.2-r0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,935
kube-prometheus-stacksoftonic81.5.12 of 6See more

kube-prometheus-stack softonic 81.5.1

2 of the 6 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
zlib@1.3.1-r2
1.3.2-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

4,975
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,672
flowssqream-chartsVerified publisher0.6.21 of 3See more

flows sqream-charts 0.6.2

1 of the 3 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
alpine/curl:8.7.1f0c1b7ca12f6
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

655
umbrellasqream-chartsVerified publisher0.1.811 of 18See more

umbrella sqream-charts 0.1.81

1 of the 18 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
alpine/curl:8.7.1f0c1b7ca12f6
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

655
mev-booststakewise1.7.41 of 1See more

mev-boost stakewise 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
flashbots/mev-boost:1.8.07c486b5789da
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,259
sn-consolestreamnative1.13.01 of 1See more

sn-console streamnative 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
streamnative/private-cloud-console:v2.3.27-all91e54375e154
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,827
lingosubstratusVerified publisher0.2.11 of 1See more

lingo substratus 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,474
prowlarrsudo-kraken-prowlarrVerified publisher3.2.11 of 1See more

prowlarr sudo-kraken-prowlarr 3.2.1

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

877
qbittorrentsudo-kraken-qbittorrentVerified publisher5.1.51 of 2See more

qbittorrent sudo-kraken-qbittorrent 5.1.5

1 of the 2 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.1.4bb82ad6668f8
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,130
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,653
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,397
languagetool-serverszpadel-chartsVerified publisher0.4.01 of 1See more

languagetool-server szpadel-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

808
mrasiftech-thinker1.0.41 of 1See more

mrasif tech-thinker 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,043
drl-exportertektonops0.1.31 of 1See more

drl-exporter tektonops 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
khaliq/drl-exporter:latestf63cf53166f8
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

883
ipup-dynutektonops0.1.11 of 1See more

ipup-dynu tektonops 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
tektonops/ipup-dynu:latestc2198746cf8f
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

863
pingmetektonops0.1.21 of 1See more

pingme tektonops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
khaliq/pingme:v0.2.749f96888d2ab
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,253
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
carlosmz87/test_helm_frontend:latest79f4b528f42a
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

11,674
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:1.002d5674ca863
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

36,661
chatqna-uitest-opea0.9.01 of 1See more

chatqna-ui test-opea 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:v0.9bdb9ec215872
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

921
uitest-opea1.0.01 of 1See more

ui test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:1.002d5674ca863
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

755
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

4,662
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,514
local-path-provisionerth-chartsVerified publisher0.0.291 of 1See more

local-path-provisioner th-charts 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.299bebefa0b908
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,300
openmeteo-exporterth-chartsVerified publisher0.1.61 of 1See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
thelande/openmeteo_exporter:v1.0.77e9072ace15f
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,380
prusa-exporterth-chartsVerified publisher0.3.01 of 1See more

prusa-exporter th-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
pubeldev/prusa_exporter:2.0.01091665a020a
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

907
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,336
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,826
todolist-charttodolist-chart0.1.72 of 10See more

todolist-chart todolist-chart 0.1.7

2 of the 10 container images this version deploys carry CVE-2026-22184.

Container imageDigestPackageFixed in
erenozcan17/go_backend:v4.250b4f23422b6
zlib@1.3.1-r2
1.3.2-r0
erenozcan17/react_frontend:v4.56e1b14973f9b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

6,974

Container images carrying it

884 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
zlib@1.3.1-r1
1.3.2-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
zlib@1.3.1-r2
1.3.2-r0
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
zlib@1.3.1-r1
1.3.2-r0
1
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
zlib@1.3.1-r2
1.3.2-r0
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zlib@1.3.1-r2
1.3.2-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
zlib@1.3.1-r2
1.3.2-r0
1
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
zlib@1.3.1-r1
1.3.2-r0
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
zlib@1.3.1-r2
1.3.2-r0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
zlib@1.3.1-r2
1.3.2-r0
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
zlib@1.3.1-r1
1.3.2-r0
1
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
zlib@1.3.1-r1
1.3.2-r0
1
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/cilium/hubble-ui:v0.13.3661d5de70501
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/kiwigrid/k8s-sidecar:2.6.0a6c101156d42
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/kubevirt/aaq-operator:v1.7.0d28a2daa5b15
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/reactiveops/rbac-manager:v1.9.587e3f461446f
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
zlib@1.3.1-r1
1.3.2-r0
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
zlib@1.3.1-r1
1.3.2-r0
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
zlib@1.3.1-r2
1.3.2-r0
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
zlib@1.3.1-r2
1.3.2-r0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
zlib@1.3.1-r2
1.3.2-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
zlib@1.3.1-r2
1.3.2-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
zlib@1.3.1-r2
1.3.2-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
zlib@1.3.1-r2
1.3.2-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
zlib@1.3.1-r1
1.3.2-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
zlib@1.3.1-r2
1.3.2-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
zlib@1.3.1-r2
1.3.2-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.