StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,439
of 17,803 indexed, latest versions
Container images
2,579
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,439 of 17,803 indexed charts deploy, on 2,579 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,675
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0898
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,439 by stars
ChartLatestAffected imagesRadar Score
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,160
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
zlib@1.3.1-r1
1.3.2-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

3,778
playgroundplayground0.1.11 of 1See more

playground playground 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,861
matomopockostVerified publisher1.3.03 of 3See more

matomo pockost 1.3.0

3 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
library/redis:8.10.1298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
pockost/matomo:5.13.07f5d293cbe4e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

5,230
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

32,112
postgresqlpostgresql-helm0.1.21 of 1See more

postgresql postgresql-helm 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,667
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,498
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,099
privacyideaprivacyidea1.0.62 of 2See more

privacyidea privacyidea 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
zlib@1.3.1-r51
1.3.2-r0
library/mariadb:11.7.2fcc7fcd7114a
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

5,503
prometheus-sql-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,207
prowlerprowler-appVerified publisher0.0.93 of 5See more

prowler prowler-app 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
prowlercloud/prowler-api:5.31.14f252d579be2
zlib@1:1.2.13.dfsg-1
no fix listed
prowlercloud/prowler-ui:5.31.179ee83c8e702
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

8,367
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,404
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,239
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

24,012
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

2,838
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,680
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,683
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,284
reportportalreportportal-ioOfficialVerified publisher26.8.124 of 15See more

reportportal reportportal-io 26.8.12

4 of the 15 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
zlib@1:1.2.13.dfsg-1
no fix listed
library/postgres:18.4a02db8cac496
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/rabbitmq:4.3.4-managementeb5295d08332
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
reportportal/service-auto-analyzer:5.15.5c449b93629a5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

12,026
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

6,643
retyc-csiretyc-csi0.2.01 of 3See more

retyc-csi retyc-csi 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/retyc/retyc-k8s-csi:v0.2.01521d4baeb85
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,380
atuinrm3lVerified publisher0.11.02 of 3See more

atuin rm3l 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,595
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

9,932
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,721
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,562
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,909
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,691
postgresromanow-helm-chartsVerified publisher1.7.11 of 1See more

postgres romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,667
rstmdbrstmdb0.2.01 of 1See more

rstmdb rstmdb 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rstmdb/rstmdb:lateste5187f2aaace
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,079
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,827
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,959
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,350
kyoorubxkubeVerified publisher0.1.106 of 9See more

kyoo rubxkube 0.1.10

6 of the 9 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.11.0b9be3d2d4251
zlib@1.3.1-r1
1.3.2-r0
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
zlib@1.3.1-r2
1.3.2-r0
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

30,468
devpisb-helm-charts0.3.01 of 1See more

devpi sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

924
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

38,479
teamcityscalified-teamcityVerified publisher2026.2.01 of 3See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,667
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
maponyacharles/sceptreai:api-0.1.127b37b092130a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,424
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

2,194
searxngsearxngVerified publisher0.1.111 of 3See more

searxng searxng 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
valkey/valkey:9.1.1-trixie64e361b630ec
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

836
seatsurfingseatsurfing0.1.21 of 1See more

seatsurfing seatsurfing 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
seatsurfing/backend:1.119.39952e80048b0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

544
securosecuroVerified publisher0.16.01See more

securo securo 0.16.0

1 container image this version deploys carries CVE-2026-27171.

Container imageDigestPackageFixed in
pgvector/pgvector:pg16ccc6e83d6e35
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

—
immichsecustorVerified publisher2.0.61 of 1See more

immich secustor 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,094
viya4-home-dir-builderselerityVerified publisher1.1.01 of 2See more

viya4-home-dir-builder selerity 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/python:3.12-slim78387bc3881b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

881
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

5,222
sentry-k8ssentry-k8sVerified publisher1.4.16 of 11See more

sentry-k8s sentry-k8s 1.4.1

6 of the 11 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redis:6.2.20-alpine77697a75da9f
zlib@1.3.1-r2
1.3.2-r0
ghcr.io/getsentry/relay:26.7.2cd29b88c1d72
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/getsentry/snuba:26.7.210f8d164109b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

16,646
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
zlib@1:1.2.13.dfsg-1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,564
sigscale-csesigscale-cseOfficialVerified publisher1.4.221 of 1See more

sigscale-cse sigscale-cse 1.4.22

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sigscale/cse:latest67d0c886516b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,301
sigscale-ocssigscale-ocsOfficialVerified publisher1.1.171 of 1See more

sigscale-ocs sigscale-ocs 1.1.17

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sigscale/ocs:latest3c1bdc9732e2
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,301
scaffoldsigstoreVerified publisher0.6.1152 of 15See more

scaffold sigstore 0.6.115

2 of the 15 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
curlimages/curldigest-pinned:8.17.0935d9100e9ba
zlib@1.3.1-r2
1.3.2-r0
library/redisdigest-pinned148bb5411c18
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,688
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,282

Container images carrying it

2,579 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-27171.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.