StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,410
of 17,813 indexed, latest versions
Container images
2,591
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,410 of 17,813 indexed charts deploy, on 2,591 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,681
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0904
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,410 by stars
ChartLatestAffected imagesRadar Score
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,172
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,958
newtjeffrescVerified publisher0.2.11 of 1See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
fosrl/newt:1.10.4ccd2b0e9a049
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,113
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,552
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,058
athens-proxyjenkins-x0.2.21 of 2See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,353
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

4,103
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,545
steamcmdjfwenischVerified publisher0.0.51 of 1See more

steamcmd jfwenisch 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
steamcmd/steamcmd:latest5028a25268e7
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1

Open the chart page →

761
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

6,673
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

6,655
hello-kubernetes-chartjhidalgo3-githubVerified publisher3.0.01 of 1See more

hello-kubernetes-chart jhidalgo3-github 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jhidalgo3/hello-kubernetes:1.0.0.1397bf5ddfa8628d79f5
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

917
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
github-exporterjkroepkeVerified publisher1.4.01 of 1See more

github-exporter jkroepke 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jkroepke/github_exporter:1.8.03d850992786d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,035
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
zlib@1:1.2.13.dfsg-1
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

22,797
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
zlib@1:1.2.13.dfsg-1
no fix listed
moreillon/group-manager:latest3caa8f710ee0
zlib@1:1.2.13.dfsg-1
no fix listed
moreillon/group-manager-front:latest5f0a38498271
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
zlib@1:1.2.13.dfsg-1
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
zlib@1:1.2.13.dfsg-1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
zlib@1:1.2.13.dfsg-1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

64,073
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

16,742
docker-hub-rssjuniorjpdj0.1.321 of 1See more

docker-hub-rss juniorjpdj 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,967
searxngjuniorjpdj0.1.351 of 2See more

searxng juniorjpdj 0.1.35

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

857
copy-fail-patchjupyter-jscVerified publisher0.2.01 of 1See more

copy-fail-patch jupyter-jsc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/ubuntu:24.0433ceb71981b6
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

700
dirty-frag-patchjupyter-jscVerified publisher0.2.01 of 1See more

dirty-frag-patch jupyter-jsc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/ubuntu:24.0433ceb71981b6
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

700
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.171 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.17

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,451
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,569
jupyter-server-oom-protectionjupyter-jscVerified publisher0.1.21 of 1See more

jupyter-server-oom-protection jupyter-jsc 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/alpine:3.23.325109184c71b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

489
jupyter-tunneljupyter-jscVerified publisher3.1.151 of 2See more

jupyter-tunnel jupyter-jsc 3.1.15

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/python:3.14.3-alpine3.23faee120f7885
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

585
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,091
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

10,613
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,665
bitcoin-stackk8s-chartsVerified publisher1.0.11 of 1See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
blockstream/bitcoind:27.29472492530e3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,465
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

5,796
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,168
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,389
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,527
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,905
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

67,517
k8sforjavak8sforjava0.1.01 of 1See more

k8sforjava k8sforjava 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
vincentgwzhang/k8sforjava:latesta9139f2cd98f
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,466
interplexk8sgptVerified publisher1.1.01 of 1See more

interplex k8sgpt 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/interplex-ai/interplex:v1.1.041b0dd0d55b2
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

747
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,373
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,776
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

27,857
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,153
lidarrk8s-home-lab-repo15.3.11 of 1See more

lidarr k8s-home-lab-repo 15.3.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,570
maddyk8s-home-lab-repo4.2.11 of 1See more

maddy k8s-home-lab-repo 4.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
foxcpp/maddy:0.8.2eeb5813fc4d1
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,205
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

9,263
readarrk8s-home-lab-repo7.2.11 of 1See more

readarr k8s-home-lab-repo 7.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.188f7551205fbd
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,101
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,900
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,733
k8s-jacoco-operatork8s-jacoco-operator0.4.02 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

2 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
zlib@1.3.1-r1
1.3.2-r0
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,444

Container images carrying it

2,591 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-27171.

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.