StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,450
of 17,797 indexed, latest versions
Container images
2,594
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,450 of 17,797 indexed charts deploy, on 2,594 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,686
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0902
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,450 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,594 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
davidy/giphy-app:1.0.2-arm41b2355cc23a
zlib@1.3.1-r1
1.3.2-r0
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
dbgate/dbgate:7.2.3f2dc7423ea88
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/alaz:v0.12.0ea602056d9ce
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
zlib@1:1.2.13.dfsg-1
no fix listed
1
decisionrules/ai-engine:latest38c377e7c01e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
zlib@1:1.2.13.dfsg-1
no fix listed
1
defactops/defactops-backend:1.0.2307b663c0092a
zlib@1:1.2.13.dfsg-1
no fix listed
1
defectdojo/defectdojo-django:3.3.100c597abdbb535
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
deluan/navidrome:0.61.29fa40b3d8dec
zlib@1.3.1-r1
1.3.2-r0
1
denniswitt/yas3p:0.2.488a235619af6
zlib@1.3.1-r2
1.3.2-r0
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
dependencytrack/apiserver:latestf1da63ed610a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
dependencytrack/frontend:4.14.200560b57a6cf
zlib@1.3.1-r2
1.3.2-r0
1
dessalines/lemmy:0.19.2079e9f02c286c
zlib@1:1.2.13.dfsg-1
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
devopsgoofy/k8s-platform:latestad865312099f
zlib@1:1.2.13.dfsg-1
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
zlib@1:1.2.13.dfsg-1
no fix listed
1
devopsiaci/self-learning-platform:1.1.3d9441c931f75
zlib@1.3.1-r2
1.3.2-r0
1
devopstales/kubedash:3.1.08bb837da5aec
zlib@1.3.1-r1
1.3.2-r0
1
devravinder/node-express-app:1.0.05325a96967b5
zlib@1.3.1-r2
1.3.2-r0
1
devture/exim-relay:4.98-r0-47ba30080c7a6
zlib@1.3.1-r2
1.3.2-r0
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
dgraph/ratel:v25.0.34cae1ff95027
zlib@1.3.1-r2
1.3.2-r0
1
directus/directus:11.1.0e3c8bb975350
zlib@1.3.1-r1
1.3.2-r0
1
diygod/rsshub:latest1d4b508b6357
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
zlib@1:1.2.13.dfsg-1
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
zlib@1:1.2.13.dfsg-1
no fix listed
1
djjudas21/bearhugmugs:0.1.14fa898a52d97
zlib@1.3.1-r1
1.3.2-r0
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
zlib@1.3.1-r2
1.3.2-r0
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
zlib@1.3.1-r2
1.3.2-r0
1
djjudas21/nova-exporter:0.0.10e9094580885c
zlib@1.3.1-r2
1.3.2-r0
1
djjudas21/smtp-relay:0.11.0ffd8143952f6
zlib@1.3.1-r2
1.3.2-r0
1
dobtc/bitcoin:25.1a870f7cb1105
zlib@1:1.2.13.dfsg-1
no fix listed
1
docmost/docmost:0.96.0b56947fcfd08
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
documenso/documenso:v1.8.17f16a9449f18
zlib@1.3.1-r1
1.3.2-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
zlib@1:1.2.13.dfsg-1
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
zlib@1:1.2.13.dfsg-1
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
zlib@1:1.2.13.dfsg-1
no fix listed
1
dpage/pgadmin4:9.11.050700ac17936
zlib@1.3.1-r2
1.3.2-r0
1
dpage/pgadmin4:9.252cb72a9e3da
zlib@1.3.1-r2
1.3.2-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
zlib@1.3.1-r1
1.3.2-r0
1
dragonflyoss/client:v1.5.59fe2a1d6206f
zlib@1:1.2.13.dfsg-1
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
zlib@1:1.2.13.dfsg-1
no fix listed
1
drorivry4/rego:lateste035d49b15ca
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.