CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 12th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,431; of 17,792 indexed, latest versions
Container images: 2,565; deployed by those charts
Fix available: 3 of 3; affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,431 of 17,792 indexed charts deploy, on 2,565 images.

Affected package	Affected versions	Fixed in	Images
zlibdeb	1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+4 more	1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.1	1,662
zlibapk	1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more	1.3.2-r0	897
zlibrpm	1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl3	1.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-1	6

OSV records: ALPINE-CVE-2026-27171 DEBIAN-CVE-2026-27171 CGA-x526-fwrp-6v3c UBUNTU-CVE-2026-27171 AZL-77886 ECHO-e10b-f259-a98b openSUSE-SU-2026:10617-1 SUSE-SU-2026:0783-1
Also known as: CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,431 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,565 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/postgres :16.4	e62fbf9d3e2b	zlib@1:1.2.13.dfsg-1	no fix listed	2
library/postgres :13-alpine	fb9065b6e3e2	zlib@1.3.1-r2	1.3.2-r0	2
library/python :3.14-slim :3-slim	cad9a2c87176	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
library/python :3.7	eedf63967cdb	zlib@1:1.2.13.dfsg-1	no fix listed	2
library/rabbitmq :3.13.6-management-alpine	611107e29cce	zlib@1.3.1-r1	1.3.2-r0	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	zlib@1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.2	2
library/rabbitmq :4.3.5-management :4-management :management	ffd1b50c522a	zlib@1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.2	2
library/redis	148bb5411c18	zlib@1.3.1-r2	1.3.2-r0	2
library/redis :7.2.3	a7cee7c8178f	zlib@1:1.2.13.dfsg-1	no fix listed	2
library/redis :8.2.2	f0957bcaa75f	zlib@1:1.2.13.dfsg-1	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	zlib@1.3.1-r1	1.3.2-r0	2
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	zlib@1.3.1-r1	1.3.2-r0	2
localstack/localstack-pro :latest	4aef81c53168	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	zlib@1:1.2.13.dfsg-1	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	zlib@1:1.2.13.dfsg-1	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	zlib@1:1.2.13.dfsg-1	no fix listed	2
meshery/meshery :stable-latest	44b64ee128fb	zlib@1:1.2.13.dfsg-1	no fix listed	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	zlib@1.3.1-r2	1.3.2-r0	2
mojaloop/reporting :v12.1.0	d480a62103d6	zlib@1.3.1-r2	1.3.2-r0	2
mojaloop/reporting-aggregator-svc :v0.0.9	2635baf23298	zlib@1.3.1-r2	1.3.2-r0	2
mojaloop/reporting-events-processor-svc :v3.5.1	1e0d24d28512	zlib@1.3.1-r2	1.3.2-r0	2
mojaloop/reporting-hub-bop-experience-api-svc :v2.0.4	265102a049d6	zlib@1.3.1-r2	1.3.2-r0	2
mojaloop/security-role-perm-operator-svc :v3.0.2	12af60892c75	zlib@1.3.1-r2	1.3.2-r0	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	zlib@1:1.2.13.dfsg-1	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	zlib@1:1.2.13.dfsg-1	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	zlib@1:1.2.13.dfsg-1	no fix listed	2
nacos/nacos-server :latest	1c191c30c8cd	zlib@1:1.3.dfsg+really1.3.1-1ubuntu3	1:1.3.dfsg+really1.3.1-1ubuntu3.1	2
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	zlib@1.3.1-r2	1.3.2-r0	2
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	zlib@1.3.1-r2	1.3.2-r0	2
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	zlib@1.3.1-r2	1.3.2-r0	2
nginxinc/nginx-unprivileged :stable	cb92301e719d	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
nutanix/nai-jobs :v2.8.0	9c373718e1b1	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
obolnetwork/charon :v1.10.0	278c7e2897b6	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
opea/chatqna-conversation-ui :1.0	02d5674ca863	zlib@1.3.1-r1	1.3.2-r0	2
opea/embedding-tei :1.0	5c9639de61c1	zlib@1:1.2.13.dfsg-1	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	zlib@1:1.2.13.dfsg-1	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	zlib@1.3.1-r1	1.3.2-r0	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	zlib@1:1.2.13.dfsg-1	no fix listed	2
opencsghq/label-studio :v2.5.0	47e22aa71870	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	2
opendatacube/ows :latest	668cbb41473c	zlib@1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.2	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	zlib@1:1.2.13.dfsg-1	no fix listed	2
oryd/kratos :v1.3.1	fe2428f103a6	zlib@1.3.1-r1	1.3.2-r0	2