StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,410
of 17,813 indexed, latest versions
Container images
2,591
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,410 of 17,813 indexed charts deploy, on 2,591 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,681
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0904
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,410 by stars
ChartLatestAffected imagesRadar Score
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

2,012
librephotosk8sonlabVerified publisher1.1.63 of 7See more

librephotos k8sonlab 1.1.6

3 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/redis:latest5927ff3702df
zlib@1:1.2.13.dfsg-1
no fix listed
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

14,984
k8s-ssh-bastionk8s-ssh-bastion0.5.41 of 1See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
zlib@1:1.3.dfsg-3.1ubuntu2
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

3,352
k8s-validating-webhookk8s-validating-webhook0.4.01 of 2See more

k8s-validating-webhook k8s-validating-webhook 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

2,012
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

2,169
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,091
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,642
postgresqlkagiso-me0.4.01 of 1See more

postgresql kagiso-me 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:17.4-alpine7062a2109c4b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,635
rediskagiso-me0.1.61 of 1See more

redis kagiso-me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine02419de7eddf
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,434
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,545
kannikakannika0.18.01 of 3See more

kannika kannika 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
quay.io/kannika/kannika-api:0.18.0bcf9906d5a3c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

779
kanrikanri0.1.01 of 1See more

kanri kanri 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,130
crashlooping-pod-deleterkarljorgensen0.1.31 of 1See more

crashlooping-pod-deleter karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,154
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,055
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,197
kbot-self-hostedkbot-self-hostedVerified publisher0.1.82 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

2 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
clamav/clamav:1.4.3_base629a3050df6a
zlib@1.3.1-r2
1.3.2-r0
gotenberg/gotenberg:8.30206a6c708fc6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

33,161
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,922
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
kcmkcm1.12.01 of 12See more

kcm kcm 1.12.0

1 of the 12 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
quay.io/reactiveops/rbac-manager:v1.9.587e3f461446f
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

3,330
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,287
kestra-starterkestraOfficialVerified publisher2.0.22 of 5See more

kestra-starter kestra 2.0.2

2 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
versity/versitygw:v1.1.0f730e0dbc1ef
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

5,622
keycloak-multi-client-notifierkeycloak-multi-client-notifier2.1.21 of 2See more

keycloak-multi-client-notifier keycloak-multi-client-notifier 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/blessingnator/keycloak-mcn-frontend:2.0.1ddd462dbde39
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,636
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat56490ac14a31
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

1,672
elasticsearch-cacherkfirfer0.0.21 of 1See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

824
quickwitkfirfer0.7.21 of 1See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,530
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,453
cdashkitwareVerified publisher0.19.03 of 3See more

cdash kitware 0.19.0

3 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
zlib@1:1.2.13.dfsg-1
no fix listed
kitware/cdash:v5.3.0d7767d9b9da4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

12,444
csa-exporterklicktippVerified publisher0.1.41 of 1See more

csa-exporter klicktipp 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,050
proxysqlklicktippVerified publisher1.3.01 of 1See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.8947a7abad45b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,573
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,447
rspamdklicktippVerified publisher1.6.11 of 1See more

rspamd klicktipp 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,899
snds-exporterklicktippVerified publisher0.2.51 of 1See more

snds-exporter klicktipp 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,059
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/klustrefs/klustre-csi-plugin:0.1.1bcf42ccda0f9
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,474
knowledge-platformknowledge-platform0.1.01 of 3See more

knowledge-platform knowledge-platform 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

722
visual-regression-trackerkokuwa5.1.02 of 4See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
zlib@1:1.2.13.dfsg-1
no fix listed
visualregressiontracker/api:5.0.11941aeb8c8bf9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

9,225
kollectkollectVerified publisher0.20.01 of 1See more

kollect kollect 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/platformrelay/kollect:v0.20.0c95fa31ead03
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,972
cloudflare-tunnel-remotekomailo-helm-charts1.3.11 of 1See more

cloudflare-tunnel-remote komailo-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

356
ingress-nginxkomailo-helm-charts1.0.01 of 2See more

ingress-nginx komailo-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,548
metallbkomailo-helm-charts1.2.41 of 4See more

metallb komailo-helm-charts 1.2.4

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
quay.io/frrouting/frr:10.4.38745af1f9bbb
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,175
komoplanekomodorVerified publisher0.1.81 of 1See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
komodorio/komoplane:0.2.19678d02c3f2e
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

955
kong-ai-gatewaykongVerified publisher0.2.11 of 1See more

kong-ai-gateway kong 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
kong/kong-ai-gateway:2.0.3367ed5985b76
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

774
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

2,255
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,688
kubeflowkromanow94-kubeflow0.5.18 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

8 of the 30 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
zlib@1:1.2.13.dfsg-1
no fix listed
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
zlib@1:1.2.13.dfsg-1
no fix listed
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
zlib@1:1.2.13.dfsg-1
no fix listed
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
zlib@1:1.2.13.dfsg-1
no fix listed
library/python:3.7eedf63967cdb
zlib@1:1.2.13.dfsg-1
no fix listed
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
zlib@1:1.2.13.dfsg-1
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
zlib@1:1.2.13.dfsg-1
no fix listed
gcr.io/ml-pipeline/viewer-crd-controller:2.3.08cf8213d69e4
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

71,368
dinsrokronkltdVerified publisher0.1.71 of 2See more

dinsro kronkltd 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
duck1123/dinsro:latest9568c5961d5d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,761
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

9,908
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,723
kron-aapm-sidecarkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-sidecar kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

272

Container images carrying it

2,591 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-27171.

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.