StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,453
of 17,803 indexed, latest versions
Container images
2,605
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,453 of 17,803 indexed charts deploy, on 2,605 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,699
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0900
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,453 by stars
ChartLatestAffected imagesRadar Score
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,691
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,702
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,691
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,647
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

13,638
management-portaleclipse-aeriosVerified publisher1.1.01 of 2See more

management-portal eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

3,877
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
zlib@1.3.1-r2
1.3.2-r0
ghcr.io/openfaas/gateway:0.27.1382b15393116e
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

6,842
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,614
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,268
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,435
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,945
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,490
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,076
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,299
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,225
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,663
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,050
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

30,645
eggybyte-chaineggybyte-hcr1.0.01 of 1See more

eggybyte-chain eggybyte-hcr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

806
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

3,986
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,686
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

1,510
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/memcached:1.675c93cc91e76
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

88,064
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/node:18-alpine8d6421d663b4
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

3,146
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

1,060
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,015
kube-ecp-stackemqx-operator2.5.14 of 16See more

kube-ecp-stack emqx-operator 2.5.1

4 of the 16 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
zlib@1.3.1-r1
1.3.2-r0
emqx/ecp-ui:2.5.1e33e9816f147
zlib@1:1.2.13.dfsg-1
no fix listed
emqxecp/otelcol:2.5.04c31d9bec846
zlib@1.3.1-r1
1.3.2-r0
library/telegraf:1.27507a3eecf809
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

23,974
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,203
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,997
network-exporterenixVerified publisher0.3.01 of 1See more

network-exporter enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
syepes/network_exporter:1.8.000af1691570e
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,373
backbone-helm-chartenmeshed-backboneVerified publisher7.2.17 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

7 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
ghcr.io/nmshd/backbone-admin-ui:7.2.169c9f075d2d9
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
ghcr.io/nmshd/backbone-consumer-api:7.2.1b8f0ce01d057
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
ghcr.io/nmshd/backbone-database-migrator:7.2.12c0c5e022714
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
ghcr.io/nmshd/backbone-event-handler:7.2.1f4d6a2006530
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
ghcr.io/nmshd/backbone-housekeeper:7.2.11c1dfe35447f
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.1da69941fa6b8
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed

Open the chart page →

3,914
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.4.121 of 1See more

connector-helm-chart enmeshed-connector 7.4.12

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.4.122f1c515eafa9
zlib@1:1.3.dfsg+really1.3.1-1+dhi3
no fix listed

Open the chart page →

273
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,351
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

27,444
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

27,409
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

68,313
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,405
postgresql-backupeosc-lot-1Verified publisher0.4.21 of 2See more

postgresql-backup eosc-lot-1 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine3.20468d34fefd63
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,467
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

2,540
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,758
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,900
espocrmespocrmVerified publisher1.0.12 of 2See more

espocrm espocrm 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/mariadb:12.2.2b1cb255a9939
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

6,611
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,947
benchmarkoor-apiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-api ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,045
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,335
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,561
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ethpandaops/buildoor:maina51b9a1a770c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

880
chaos-meshethereum-helm-chartsVerified publisher0.0.33 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

3 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

12,464
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ethpandaops/dora:master2381ea793a12
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,042

Container images carrying it

2,605 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
zlib@1.3.1-r2
1.3.2-r0
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
zlib@1:1.2.13.dfsg-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
zlib@1:1.2.13.dfsg-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
zlib@1:1.2.13.dfsg-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.