StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,410
of 17,813 indexed, latest versions
Container images
2,591
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,410 of 17,813 indexed charts deploy, on 2,591 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,681
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0904
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,410 by stars
ChartLatestAffected imagesRadar Score
docsumtest-opea1.0.04 of 5See more

docsum test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
zlib@1:1.2.13.dfsg-1
no fix listed
opea/docsum:1.03eaa91849512
zlib@1:1.2.13.dfsg-1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
zlib@1:1.2.13.dfsg-1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

29,157
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,263
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,299
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,797
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,063
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,276
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

9,713
teitest-opea1.0.01 of 1See more

tei test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,330
teireranktest-opea1.0.01 of 1See more

teirerank test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,330
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,443
uitest-opea1.0.01 of 1See more

ui test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:1.002d5674ca863
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

755
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,445
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

20,465
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

4,677
codeth-chartsVerified publisher0.1.01 of 1See more

code th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
collabora/code:24.04.13.2.101dc4ab83977
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,305
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,021
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,531
local-path-provisionerth-chartsVerified publisher0.0.291 of 1See more

local-path-provisioner th-charts 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.299bebefa0b908
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,301
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,215
openmeteo-exporterth-chartsVerified publisher0.1.61 of 1See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
thelande/openmeteo_exporter:v1.0.77e9072ace15f
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,382
prusa-exporterth-chartsVerified publisher0.3.01 of 1See more

prusa-exporter th-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
pubeldev/prusa_exporter:2.0.01091665a020a
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

909
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,528
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

25,562
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest779759172676
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,885
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,822
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,492
joplintobiassackmann0.1.72 of 2See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
joplin/server:latest3f7b852959aa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,665
todolist-charttodolist-chart0.1.73 of 10See more

todolist-chart todolist-chart 0.1.7

3 of the 10 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
erenozcan17/go_backend:v4.250b4f23422b6
zlib@1.3.1-r2
1.3.2-r0
erenozcan17/react_frontend:v4.56e1b14973f9b
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,083
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

3,216
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,114
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,354
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,247
netbirdtotmicro1.8.21 of 4See more

netbird totmicro 1.8.2

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
netbirdio/management:0.60.252682e5f48f9
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

6,081
traefik-external-dns-controllertraefik-external-dns-operator2.2.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.2.08d27ad8b5f73
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,528
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,228
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,671
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,856
treenitytreenityVerified publisher0.1.31 of 4See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,405
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v1.0.058b9fac358bd
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,201
gtm-server-container-clustertrieb-work0.1.81 of 1See more

gtm-server-container-cluster trieb-work 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

503
saleor-appstrieb-work0.6.04 of 5See more

saleor-apps trieb-work 0.6.0

4 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
zlib@1.3.1-r2
1.3.2-r0
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
zlib@1.3.1-r2
1.3.2-r0
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,495
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,228
trivy-webhook-elasticsearchtrivy-webhook-elasticsearch0.1.41 of 1See more

trivy-webhook-elasticsearch trivy-webhook-elasticsearch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/lbi22/trivy-webhook-elasticsearch:v0.1.4b51b824e4f19
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

755
trowtrow0.13.01 of 1See more

trow trow 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,321
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

17,459
tfy-grafanatruefoundryVerified publisher0.1.211 of 3See more

tfy-grafana truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,082
tfy-logstruefoundryVerified publisher0.1.211 of 3See more

tfy-logs truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,036
tfy-lokitruefoundryVerified publisher0.1.61 of 2See more

tfy-loki truefoundry 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

2,828
truefoundry-monitoringtruefoundryVerified publisher0.1.62 of 8See more

truefoundry-monitoring truefoundry 0.1.6

2 of the 8 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
zlib@1.3.1-r2
1.3.2-r0
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

4,598
altinnendata-apptumogroup0.1.171 of 1See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,885

Container images carrying it

2,591 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-27171.

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.