StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,456
of 17,792 indexed, latest versions
Container images
2,606
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,456 of 17,792 indexed charts deploy, on 2,606 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,698
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0902
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,456 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,692
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,630
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

485
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,565
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,861
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,160

Container images carrying it

2,606 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
buddyspencer/gickup:0.10.386b656f19b0c1
zlib@1.3.1-r1
1.3.2-r0
1
budibase/database:2.1.0d90f656261c9
zlib@1:1.2.13.dfsg-1
no fix listed
1
budibase/proxy:3.41.38d780b6ee602
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
bugsink/bugsink:2ecdd84587746
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
burakince/mlflow:3.16.0ab4b566644b9
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
burganbank/vault-initializer:v19259c34e4037
zlib@1.3.1-r1
1.3.2-r0
1
byjg/static-httpserver:latest562cc8b9c40b
zlib@1.3.1-r2
1.3.2-r0
1
byrnedo/alpine-curl:latest7f0599d553e2
zlib@1.3.1-r2
1.3.2-r0
1
calltelemetry/web:0.8.1-rc7205d13269e350
zlib@1:1.2.13.dfsg-1
no fix listed
1
camunda/camunda-bpm-platform:latestbcc5bb0542df
zlib@1.3.1-r2
1.3.2-r0
1
carbone/carbone-ee:full-5.11.0518172cbad49
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
zlib@1:1.2.13.dfsg-1
no fix listed
1
carlosmz87/test_helm_frontend:latest79f4b528f42a
zlib@1.3.1-r1
1.3.2-r0
1
casbin/casdoor:v1.753.0770ad9ec3190
zlib@1.3.1-r1
1.3.2-r0
1
castai/hibernate:v0.14da62858c8381
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
castlemock/castlemock:latestb7f3f1527ba9
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
castopod/castopod:1.12.101fd37280cbb2
zlib@1:1.2.13.dfsg-1
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
cccs/assemblyline-core:4.7.4.stable20098127270065
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable202be5e6a57427
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable202b88493b62f7
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable20efa75509b854
zlib@1:1.2.13.dfsg-1
no fix listed
1
censedata/floating-server:v1.6.3ebfffb9dd4c0
zlib@1.3.1-r2
1.3.2-r0
1
cesanta/docker_auth:1.14.098e0307e0d2d
zlib@1.3.1-r2
1.3.2-r0
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
zlib@1.2.11-lp151.5.3.1
1.3.1-2.1
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
zlib@1.2.11-lp151.5.3.1
1.3.1-2.1
1
chainflag/eth-faucet:latestac642796bcb6
zlib@1.3.1-r2
1.3.2-r0
1
chainsafe/lodestar:latest5593f6e97912
zlib@1:1.2.13.dfsg-1
no fix listed
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
zlib@1:1.2.13.dfsg-1
no fix listed
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
zlib@1.3.1-r2
1.3.2-r0
1
chatwoot/chatwoot:v4.15.167ebc751c171
zlib@1.3.1-r2
1.3.2-r0
1
chibisafe/chibisafe:latest836467a50792
zlib@1.3.1-r2
1.3.2-r0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
zlib@1.3.1-r2
1.3.2-r0
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
christianhuth/node-hostname:1.0.1c07f414a3e4b
zlib@1.3.1-r2
1.3.2-r0
1
chromadb/chroma:1.5.7fc8dc8e11fb2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ciuse99/suggestarr:v1.0.20d72768245ef5
zlib@1.3.1-r2
1.3.2-r0
1
ckan/ckan-base:2.12.087ecf3f27ad6
zlib@1:1.2.13.dfsg-1
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
zlib@1:1.2.13.dfsg-1
no fix listed
1
clickhouse/clickhouse-server:24.12.6.70-alpinecd450891db46
zlib@1.3.1-r2
1.3.2-r0
1
cloudflare/cloudflared:2026.9.0ff69a2225ad7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
cloudposse/bastion:latest0d9507e8a760
zlib@1.3.1-r2
1.3.2-r0
1
cloudreve/cloudreve:4.18.0f7a464100bf6
zlib@1.3.1-r2
1.3.2-r0
1
cloudtooling/moodle:5.2.3f4f04e0fc401
zlib@1:1.2.13.dfsg-1
no fix listed
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
zlib@1:1.2.13.dfsg-1
no fix listed
1
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
zlib@1.3.1-r2
1.3.2-r0
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
zlib@1:1.2.13.dfsg-1
no fix listed
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.