StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,462
of 17,821 indexed, latest versions
Container images
2,639
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,462 of 17,821 indexed charts deploy, on 2,639 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+5 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,713
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0916
zlibrpm1.2.11-lp151.5.3.1, 1.2.11-lp152.8.6.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-110
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,462 by stars
ChartLatestAffected imagesRadar Score
search-proxysearch-proxy2026.38.01 of 1See more

search-proxy search-proxy 2026.38.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,352
seawise-dashboardseawiseVerified publisher1.7.11 of 1See more

seawise-dashboard seawise 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
shwcloud/seawise-backup:v1.7.1a97479a54df4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,135
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

5,509
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,150
security-smellssecurity-smells0.1.01 of 1See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
durellirsd/security-smells-api:v17398aca4fc2e
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

1,425
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

990
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,448
valkeyself-hosters-by-nightVerified publisher0.1.01 of 1See more

valkey self-hosters-by-night 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

861
service-exampleservice-example-10.1.02 of 7See more

service-example service-example-1 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

9,147
serviceexampleserviceexample-chart0.3.03 of 4See more

serviceexample serviceexample-chart 0.3.0

3 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
tibyandocker/serviceexample:latesta4ad592cea84
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,105
serviceexampleservice-example-helm-chart0.1.02 of 4See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,346
service-exampleservice-example-jt0.1.15 of 9See more

service-example service-example-jt 0.1.1

5 of the 9 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
zlib@1:1.2.13.dfsg-1
no fix listed
library/nats:2.12.2-alpine2d5fce3229ae
zlib@1.3.1-r2
1.3.2-r0
natsio/nats-box:0.19.28031d190c7ee
zlib@1.3.1-r2
1.3.2-r0
natsio/nats-server-config-reloader:0.20.147094fcae2f4
zlib@1.3.1-r2
1.3.2-r0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,598
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,297
ccx-monitoringseveralnines0.6.213 of 7See more

ccx-monitoring severalnines 0.6.21

3 of the 7 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
zlib@1.3.1-r2
1.3.2-r0
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
zlib@1.3.1-r2
1.3.2-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

7,746
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,113
my-nginx-appsherif-nginx-app0.1.01 of 1See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,956
shopsyncshopsyncVerified publisher1.0.01 of 1See more

shopsync shopsync 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
shyamkrishna21/shopsync:latest3998b83def53
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,238
shopwareshopware-storeVerified publisher2.1.22 of 5See more

shopware shopware-store 2.1.2

2 of the 5 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-alpha.738e467b32af3f
zlib@1.3.1-r2
1.3.2-r0
valkey/valkey:83fbd2e3e4b6e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,140
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,699
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,683
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,319
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,319
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,023
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,715
moksi-gitops0.16.41 of 2See more

mok si-gitops 0.16.4

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

664
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,892
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,699
local-static-provisionersig-storage-local-static-provisioner2.9.01 of 1See more

local-static-provisioner sig-storage-local-static-provisioner 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,286
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

2,752
counter-dhlsikademo0.3.03 of 3See more

counter-dhl sikademo 0.3.0

3 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:latest8a1efc5f4795
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ondrejsika/counter:latestd95eaeee2172
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,561
gordy-redissikademo0.1.01 of 1See more

gordy-redis sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,010
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,221
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,221
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,221
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,956
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,052
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

789
simple-node-expresssimple-node-express1.0.01 of 1See more

simple-node-express simple-node-express 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
devravinder/node-express-app:1.0.05325a96967b5
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

901
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,956
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,792
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,140
headscalesinextraVerified publisher0.1.01 of 1See more

headscale sinextra 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.29.30e7f1c6e4ce6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

576
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,114
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2

Open the chart page →

2,883
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,982
service-commonsinextraVerified publisher0.3.161 of 1See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/haproxy:2.8.288baa7d29a27a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

878
tabixsinextraVerified publisher0.2.21 of 1See more

tabix sinextra 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
zlib@1.3.1-r2
1.3.2-r0

Open the chart page →

1,251
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
zlib@1.3.1-r1
1.3.2-r0

Open the chart page →

2,449
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
library/memcached:1.6.409ae868852d0b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,077
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-27171.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,014

Container images carrying it

2,639 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

No deployed image carries CVE-2026-27171.

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.