StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,453
of 17,803 indexed, latest versions
Container images
2,605
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,453 of 17,803 indexed charts deploy, on 2,605 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,699
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0900
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,453 by stars
ChartLatestAffected imagesRadar Score
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,569
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,160

Container images carrying it

2,605 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
localstack/localstack:3.19d278167f2b7
zlib@1:1.2.13.dfsg-1
no fix listed
1
locustio/locust:2.24.151d866285170
zlib@1:1.2.13.dfsg-1
no fix listed
1
loeken/radarr:5.27.0-nightlya24409d3846d
zlib@1.3.1-r2
1.3.2-r0
1
logiqai/flash:v3.10.265b996bc7bdc
zlib@1:1.2.13.dfsg-1
no fix listed
1
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
zlib@1.2.13-150500.4.3.1
1.2.13-150500.4.6.1
1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
zlib@1.2.13-150500.4.3.1
1.2.13-150500.4.6.1
1
longhornio/longhorn-ui:v1.10.0e60f36161511
zlib@1.2.13-150500.4.3.1
1.2.13-150500.4.6.1
1
louislam/its-mytabs:1.7.02e478d3170bd
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
zlib@1:1.2.13.dfsg-1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
zlib@1:1.2.13.dfsg-1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
zlib@1:1.2.13.dfsg-1
no fix listed
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
zlib@1:1.2.13.dfsg-1
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
zlib@1:1.2.13.dfsg-1
no fix listed
1
luligu/matterbridge:3.10.9c01108d904ec
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
machines/filestash:latest0b8fc005e52e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
maildev/maildev:2.2.1180ef51f65ee
zlib@1.3.1-r2
1.3.2-r0
1
makemake1337/blutgang:latest8a55174fc830
zlib@1:1.2.13.dfsg-1
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
zlib@1:1.2.13.dfsg-1
no fix listed
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
marcoimme/oidcmock:latestb6035c0721a8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
zlib@1:1.2.13.dfsg-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
zlib@1:1.2.13.dfsg-1
no fix listed
1
mathieuruellan/piwigo:latest04572c8a1b04
zlib@1.3.1-r1
1.3.2-r0
1
mathnao/certs:2.1.3b900e6b64684
zlib@1.3.1-r2
1.3.2-r0
1
matrixdotorg/synapse:v1.161.06b95dd129e35
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
zlib@1:1.2.13.dfsg-1
no fix listed
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
zlib@1:1.2.13.dfsg-1
no fix listed
1
matterlabs/external-node:v24.0.06cbfea4c694a
zlib@1:1.2.13.dfsg-1
no fix listed
1
mauricenino/dashdot:5.9.2236997816917
zlib@1.3.1-r2
1.3.2-r0
1
mautic/mautic:7-apacheeb8cc73d97e1
zlib@1:1.2.13.dfsg-1
no fix listed
1
mavrick1/kubestellar-b:latest45ca0429a1d4
zlib@1.3.1-r2
1.3.2-r0
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
zlib@1.3.1-r2
1.3.2-r0
1
mawad98/backstage-pyactions:demo99422c56a274
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
megaease/easegress:latestfad1c7452958
zlib@1.3.1-r2
1.3.2-r0
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
merlos/zookeeper:3.9.3a38fc7e09ed7
zlib@1:1.2.13.dfsg-1
no fix listed
1
metabase/metabase:v0.53.4.17807bc5cad17
zlib@1.3.1-r2
1.3.2-r0
1
middlewareeng/middleware:0.3.1747d880812f1
zlib@1:1.2.13.dfsg-1
no fix listed
1
mikefarah/yq:4.45.12c100efaca06
zlib@1.3.1-r2
1.3.2-r0
1
mindsdb/mindsdb:latest163011c09299
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
miniflux/miniflux:2.2.18a3ca6bbc1f74
zlib@1.3.1-r2
1.3.2-r0
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
zlib@1:1.2.13.dfsg-1
no fix listed
1
miqm/session-scaler:0.1.0c5c211717d9b
zlib@1:1.2.13.dfsg-1
no fix listed
1
mockserver/mockserver:mockserver-8.0.0b8426e0b3c80
zlib@1:1.2.13.dfsg-1
no fix listed
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
zlib@1:1.2.13.dfsg-1
no fix listed
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
zlib@1.3.1-r1
1.3.2-r0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.