StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,453
of 17,803 indexed, latest versions
Container images
2,605
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,453 of 17,803 indexed charts deploy, on 2,605 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,699
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0900
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,453 by stars
ChartLatestAffected imagesRadar Score
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,150
helm-samplebehnambm-helm-chart1.0.12 of 3See more

helm-sample behnambm-helm-chart 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
zlib@1.3.1-r1
1.3.2-r0
library/redis:771da9275c5f3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,775
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

5,263
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,256
bdbablackduck2026.6.36 of 9See more

bdba blackduck 2026.6.3

6 of the 9 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
blackducksoftware/bdba-fluentd:2026.6.3c14bbbf45536
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
fluent/fluent-bit:4.2.6a52221a2a3eb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/memcached:1.6.42-trixiee2a8683c7fbb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/postgres:15.18-bookworme8db9bd3e9e1
zlib@1:1.2.13.dfsg-1
no fix listed
library/rabbitmq:4.2.87561d672fae4
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

9,916
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
colosseumbook-k8sinfra-v21.0.183 of 5See more

colosseum book-k8sinfra-v2 1.0.18

3 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
zlib@1:1.2.13.dfsg-1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
zlib@1:1.2.13.dfsg-1
no fix listed
sysnet4admin/colosseum-rwd:log74ded2d92f07
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

27,300
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,290
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,823
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,351
kube-prometheus-stackbook-k8sinfra-v265.5.12 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

2 of the 6 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
zlib@1.3.1-r1
1.3.2-r0
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

6,059
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,877
bitmagnetbrandan-schmitz-helm-chartsVerified publisher1.0.61 of 2See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,866
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

27,754
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

3,085
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
tautullibryanalves0.1.01 of 1See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
tautulli/tautulli:latest670e68dd9efc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,948
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

68,447
openmctbryopsida0.1.11 of 1See more

openmct bryopsida 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/openmct:main38b6a50a62b2
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,097
plexbryopsida0.2.01 of 1See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1

Open the chart page →

868
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,309
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

11,974
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

9,463
mariadbbysamioVerified publisher1.0.21 of 1See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/mariadb:12.0.2607835cd628b
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

2,963
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,402
rediscagriekinVerified publisher1.5.21 of 2See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:8.8.1-trixie3eafabb4c93f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,420
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,691
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,060
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

88,687
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,371
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,037
pgbouncer-tlscamptocamp32.3.02 of 2See more

pgbouncer-tls camptocamp3 2.3.0

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/haproxy:3.2de601ccc9a79
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/camptocamp/pgbouncer:latest19dc5663cac4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,962
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,886
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,273
castai-hibernatecastaiVerified publisher0.2.121 of 1See more

castai-hibernate castai 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
castai/hibernate:v0.14da62858c8381
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,195
temporalcastaiVerified publisher0.54.22 of 14See more

temporal castai 0.54.2

2 of the 14 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
zlib@1.3.1-r1
1.3.2-r0
temporalio/server:1.26.21e2626efcbc1
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

16,266
catalyst-agentscatalyst-agents0.1.333 of 18See more

catalyst-agents catalyst-agents 0.1.33

3 of the 18 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
zlib@1.3.1-r2
1.3.2-r0
grafana/tempo:2.5.0f0200a9bff6d
zlib@1.3.1-r1
1.3.2-r0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

17,669
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,336
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,423
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,246
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,087
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,341
getoutlinecfi20171.2.02 of 4See more

getoutline cfi2017 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redis:8.2.3d31852005202
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,522
opencvecfi20170.1.25 of 7See more

opencve cfi2017 0.1.2

5 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:trixie05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/postgres:18.06f3e42ad37de
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redis:7.2-bookworm74566c6910d1
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

15,653
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,341
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,269
charon-relaycharonOfficialVerified publisher0.8.02 of 2See more

charon-relay charon 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
zlib@1.3.1-r2
1.3.2-r0
obolnetwork/charon:v1.10.0278c7e2897b6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,481
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
obolnetwork/charon-dkg-sidecar:maine263be0a7440
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,570

Container images carrying it

2,605 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
zlib@1.3.1-r2
1.3.2-r0
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
zlib@1:1.2.13.dfsg-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
zlib@1:1.2.13.dfsg-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
zlib@1:1.2.13.dfsg-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.