StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,450
of 17,797 indexed, latest versions
Container images
2,594
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,450 of 17,797 indexed charts deploy, on 2,594 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,686
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0902
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,450 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,594 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
flanksource/incident-manager-ui:v1.4.318891f21df54fb
zlib@1:1.2.13.dfsg-1
no fix listed
1
flashbots/mev-boost:1.8.07c486b5789da
zlib@1.3.1-r1
1.3.2-r0
1
flashcatcloud/categraf:latest42e6ab16472e
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
flashcatcloud/nightingale:8.5.1421acb36181b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
fleetdm/fleet:v4.66.012e644b7f40e
zlib@1.3.1-r2
1.3.2-r0
1
flowable/flowable-rest:7.1.0b7ae287502cd
zlib@1.3.1-r1
1.3.2-r0
1
fluent/fluent-bit:4.2.6a52221a2a3eb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
fluent/fluent-bit:5.1.1a941bdd5ca55
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
zlib@1:1.2.13.dfsg-1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
zlib@1:1.2.13.dfsg-1
no fix listed
1
fluent/fluentd-kubernetes-daemonset:v1.19.3-debian-elasticsearch7-1.1de9cf5f1127a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
folioci/mod-agreements:latest29c3f233a498
zlib@1.3.1-r1
1.3.2-r0
1
folioci/mod-authtoken:latest995a25a33133
zlib@1.3.1-r2
1.3.2-r0
1
folioci/mod-courses:latest68ca414f5596
zlib@1.3.1-r2
1.3.2-r0
1
folioci/mod-ldp:latestb55696fd9065
zlib@1.3.1-r1
1.3.2-r0
1
folioci/mod-licenses:latestcfd6109bf477
zlib@1.3.1-r1
1.3.2-r0
1
folioci/mod-oa:latestae3b069d4ba5
zlib@1.3.1-r1
1.3.2-r0
1
folioci/mod-search:latest44d7ee9acdf6
zlib@1.3.1-r2
1.3.2-r0
1
folioci/mod-serials-management:latest571fa1ffe8c9
zlib@1.3.1-r1
1.3.2-r0
1
folioci/mod-service-interaction:latestf53c327a48e8
zlib@1.3.1-r1
1.3.2-r0
1
folioci/mod-z3950:latest2493041ce880
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
fosrl/newt:1.10.4ccd2b0e9a049
zlib@1.3.1-r2
1.3.2-r0
1
fosrl/pangolin:latest83a55f933b4d
zlib@1:1.2.13.dfsg-1
no fix listed
1
fosrl/pangolin:1.13.0c32ad797ab96
zlib@1.3.1-r2
1.3.2-r0
1
foxcpp/maddy:0.9.2a4b839985b9b
zlib@1.3.1-r2
1.3.2-r0
1
foxcpp/maddy:0.8.2eeb5813fc4d1
zlib@1.3.1-r2
1.3.2-r0
1
frankescobar/allure-docker-service:latestdc171ec796d5
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
freedom98/flask:k3.0d7ce1533f297
zlib@1:1.2.13.dfsg-1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
zlib@1:1.2.13.dfsg-1
no fix listed
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
zlib@1:1.3.dfsg-3.1ubuntu2
1:1.3.dfsg-3.1ubuntu2.2
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
zlib@1.3.1-r2
1.3.2-r0
1
gdrocha/togglr-frontend:1.0.0ffbc1571c234
zlib@1.3.1-r2
1.3.2-r0
1
geopython/pycsw:3.0.0-beta284662ea6b78b
zlib@1:1.2.13.dfsg-1
no fix listed
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
getmeili/meilisearch:v1.11.0b9be3d2d4251
zlib@1.3.1-r1
1.3.2-r0
1
getmeili/meilisearch:v1.13.3bed3fb650e62
zlib@1.3.1-r1
1.3.2-r0
1
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
zlib@1.3.1-r2
1.3.2-r0
1
getsentry/relay:24.10.0ba7bf9163219
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
giantswarm/silence-operator:0.13.0a6cac55aa2d4
zlib@1.3.1-r2
1.3.2-r0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
zlib@1.3.1-r1
1.3.2-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.