StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,453
of 17,803 indexed, latest versions
Container images
2,605
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,453 of 17,803 indexed charts deploy, on 2,605 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,699
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0900
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,453 by stars
ChartLatestAffected imagesRadar Score
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,569
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,160

Container images carrying it

2,605 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/rabbitmq:4.3.4-managementeb5295d08332
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
library/redis:8.6.2009cc37796fb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/redis:8.8.0234c902a2db4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/redis:8.4.03906b477e4b6
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.8.1-trixie3eafabb4c93f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/redis:8.2.24521b581dbdd
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.6.34d25e2fe601f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/redis:8.2.15fa2edb1e408
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:7.2.5-alpine6aaf3f5e6bc8
zlib@1.3.1-r1
1.3.2-r0
1
library/redis:6.2.20-alpine77697a75da9f
zlib@1.3.1-r2
1.3.2-r0
1
library/redis83edc2b8e9ff
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.48df317692c59
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/redis:8.0.2b43d2dcbbdb1
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:7.4.1bb142a9c18ac
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.0.3be0a135f1955
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:7.4.1-alpinec1e88455c852
zlib@1.3.1-r1
1.3.2-r0
1
library/redis:7.0-alpinec9d92d840fd0
zlib@1.3.1-r1
1.3.2-r0
1
library/redis:8.2.3d31852005202
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redmine:6.1.204ac44a2595b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/telegraf:1.27507a3eecf809
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
library/traefik:3.3.5104204dadedf
zlib@1.3.1-r2
1.3.2-r0
1
library/varnish:7.5.04d0bb287d87b
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/varnish:alpinea84e1d4adb58
zlib@1.3.1-r2
1.3.2-r0
1
library/wordpress:6.4.3-apache8ae66efb09a2
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
library/xwiki:lts-postgres-tomcat56490ac14a31
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
zlib@1:1.2.13.dfsg-1
no fix listed
1
lifailon/openrouter-bot:latestea37e4b6b952
zlib@1.3.1-r2
1.3.2-r0
1
linkstackorg/linkstack:latest1c8b05399ee4
zlib@1.3.1-r2
1.3.2-r0
1
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
zlib@1.3.1-r2
1.3.2-r0
1
linuxserver/calibre-web:0.6.24241009026e6f
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
zlib@1.3.1-r2
1.3.2-r0
1
linuxserver/foldingathome:8.5.67477f6455f47
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
linuxserver/foldingathome:7.6.219a997426d71e
zlib@1:1.3.dfsg-3.1ubuntu2
1:1.3.dfsg-3.1ubuntu2.2
1
linuxserver/heimdall:2.6.371597f4461e4
zlib@1.3.1-r1
1.3.2-r0
1
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
zlib@1.3.1-r1
1.3.2-r0
1
linuxserver/overseerr:1.35.06108ed066d4a
zlib@1.3.1-r2
1.3.2-r0
1
linuxserver/plex:1.43.22785a6ad64d3
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
linuxserver/smokeping:2.8.2b7f906899cd3
zlib@1.3.1-r1
1.3.2-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
zlib@1:1.2.13.dfsg-1
no fix listed
1
lissy93/networking-toolbox:latest700862839553
zlib@1.3.1-r2
1.3.2-r0
1
listmonk/listmonk:v6.0.0bf3903d54a46
zlib@1.3.1-r2
1.3.2-r0
1
litlyx/litlyx-consumer:latest02225e77d316
zlib@1.3.1-r2
1.3.2-r0
1
litlyx/litlyx-dashboard:lateste64ff2d52385
zlib@1.3.1-r2
1.3.2-r0
1
litlyx/litlyx-producer:latest10407f36613f
zlib@1.3.1-r2
1.3.2-r0
1
livekit/livekit-server:v1.9.03602a85840d5
zlib@1.3.1-r2
1.3.2-r0
1
lmacka/snappass:2.1.293f5c048b7d4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
localstack/localstack:latest4abc29e923e5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.