StackRadar

CVE-2026-27171

Medium

Advisory

Published 18 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,431
of 17,792 indexed, latest versions
Container images
2,565
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

Carried by container images the latest versions of 2,431 of 17,792 indexed charts deploy, on 2,565 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.13.dfsg-1, 1:1.3.dfsg-3.1ubuntu2, 1:1.3.dfsg-3.1ubuntu2.1, 1:1.3.dfsg+really1.3.1-1+b1+4 more1:1.3.dfsg-3.1ubuntu2.2, 1:1.3.dfsg+really1.3.1-1+e1, 1:1.3.dfsg+really1.3.1-1ubuntu3.11,662
zlibapk1.3-r2, 1.3.1-r1, 1.3.1-r2, 1.3.1-r4+3 more1.3.2-r0897
zlibrpm1.2.11-lp151.5.3.1, 1.2.13-150500.4.3.1, 1.3.1-1.azl31.2.13-150500.4.6.1, 1.3.1-2.1, 1.3.2-16
OSV records
ALPINE-CVE-2026-27171DEBIAN-CVE-2026-27171CGA-x526-fwrp-6v3cUBUNTU-CVE-2026-27171AZL-77886ECHO-e10b-f259-a98bopenSUSE-SU-2026:10617-1SUSE-SU-2026:0783-1
Also known as
CGA-xjhg-6p5p-42rc, USN-8706-1

Charts affected

2,431 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,565 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
apache/apisix:3.16.0-ubuntu5e47692cac00
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
apache/camel-k:2.11.0d173e7efe258
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
apache/druid:29.0.10cef139b6bf1
zlib@1:1.2.13.dfsg-1
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
apache/kafka:4.1.0bff074a5d005
zlib@1.3.1-r2
1.3.2-r0
1
apache/kafka:3.9.0fbc7d7c428e3
zlib@1.3.1-r1
1.3.2-r0
1
apache/kafka-native:4.1.09a9d16e60894
zlib@1.3.1-r2
1.3.2-r0
1
apache/rocketmq:5.3.0434d8398f996
zlib@1:1.3.dfsg-3.1ubuntu2
1:1.3.dfsg-3.1ubuntu2.2
1
apache/superset:4.0.1ab9467fd712c
zlib@1:1.2.13.dfsg-1
no fix listed
1
apache/tika:latest-full80072bb73dd3
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
apache/tika:3.3.1.090b7fa1dc018
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
1:1.3.dfsg+really1.3.1-1ubuntu3.1
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
zlib@1.3.1-r1
1.3.2-r0
1
apecloud/gemini-scheduler:0.1.15832d1a9097a
zlib@1.3.1-r1
1.3.2-r0
1
appwrite/appwrite:1.9.01aaa70127114
zlib@1.3.1-r2
1.3.2-r0
1
appwrite/console:7.5.7aaa11ceab999
zlib@1.3.1-r1
1.3.2-r0
1
appwrite/new:1.1.96-self-hostedaf65a77db50e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aquasec/kube-bench:v0.15.07a8fa32dce21
zlib@1.3.1-r2
1.3.2-r0
1
aquasec/tracee:0.24.1cfbbfee972e6
zlib@1.3.1-r2
1.3.2-r0
1
aquasec/trivy:0.69.3bcc376de8d77
zlib@1.3.1-r2
1.3.2-r0
1
archivebox/archivebox:0.7.41a5a37331091
zlib@1:1.2.13.dfsg-1
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
zlib@1:1.2.13.dfsg-1
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
zlib@1:1.2.13.dfsg-1
no fix listed
1
artifacthub/db-migrator:v1.19.02a746b289fcd
zlib@1.3.1-r1
1.3.2-r0
1
artifacthub/hub:v1.19.0111918d8c399
zlib@1.3.1-r1
1.3.2-r0
1
artifacthub/scanner:v1.19.0323d026e78c3
zlib@1.3.1-r1
1.3.2-r0
1
artifacthub/tracker:v1.23.05368d21a6e5c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
zlib@1:1.2.13.dfsg-1
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
assistiot/identity-manager_db:latest0d3e6d35f168
zlib@1:1.2.13.dfsg-1
no fix listed
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
zlib@1:1.2.13.dfsg-1
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
zlib@1:1.2.13.dfsg-1
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
zlib@1:1.2.13.dfsg-1
no fix listed
1
athou/commafeed:6.2.0-postgresql5e388351df1a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
atlassian/jira-software:9.7.264a75aa4ec4e
zlib@1:1.3.dfsg-3.1ubuntu2.1
1:1.3.dfsg-3.1ubuntu2.2
1
automatischio/automatisch:0.15.03bace7a12d5f
zlib@1.3.1-r2
1.3.2-r0
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
zlib@1:1.2.13.dfsg-1
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
zlib@1:1.2.13.dfsg-1
no fix listed
1
avzini/web-app:latestf40b30210ed0
zlib@1:1.2.13.dfsg-1
no fix listed
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
zlib@1.3.1-r2
1.3.2-r0
1
b3log/siyuan:v3.1.2595c0d129bc19
zlib@1.3.1-r2
1.3.2-r0
1
b4bz/homer:v24.12.14b44a4a9e329
zlib@1.3.1-r1
1.3.2-r0
1
b4bz/homer:v25.02.2c367265313f9
zlib@1.3.1-r2
1.3.2-r0
1
baserow/backend:2.3.37c00549b3a6f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
baserow/backend:1.31.1e0b3c8130b91
zlib@1:1.2.13.dfsg-1
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
zlib@1:1.2.13.dfsg-1
no fix listed
1
baserow/web-frontend:2.3.3566d24c7d9f5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
behnambm/docker-sample:v1bd3ad88afff9
zlib@1.3.1-r1
1.3.2-r0
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.