CVE-2026-41991
MediumAdvisory
Published 29 Jun 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.002
- 8th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,251
- of 17,797 indexed, latest versions
- Container images
- 2,207
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Security update for gzip
Carried by container images the latest versions of 2,251 of 17,797 indexed charts deploy, on 2,207 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gzipdeb | 1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more | 1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more | 2,198 |
| gziprpm | 1.10-150200.10.1, 1.13-160000.2.2 | 1.10-150200.13.1, 1.13-160000.3.1 | 9 |
- OSV records
- DEBIAN-CVE-2026-41991UBUNTU-CVE-2026-41991ECHO-233f-78f2-a73bSUSE-SU-2026:22818-1SUSE-SU-2026:3269-1
- Also known as
- USN-8512-1, USN-8733-1
Charts affected
2,251 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,272 |
Container images carrying it
2,207 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dbgate/ | f2dc7423ea88 | gzip | no fix listed | 1 |
| dblaci/ | eea697611af4 | gzip | 1.10-4ubuntu4.2 | 1 |
| ddosify/ | ea602056d9ce | gzip | no fix listed | 1 |
| ddosify/ | a43c5155fa1c | gzip | no fix listed | 1 |
| ddosify/ | 3c11e3182652 | gzip | no fix listed | 1 |
| ddosify/ | ac323d52bfb4 | gzip | no fix listed | 1 |
| ddosify/ | b796b8c73011 | gzip | no fix listed | 1 |
| decisionrules/ | 38c377e7c01e | gzip | 1.13-1+deb13u1 | 1 |
| deconzcommunity/ | 062de2362641 | gzip | no fix listed | 1 |
| deepflowce/ | bc1882f75c18 | gzip | no fix listed | 1 |
| deepflowce/ | 29332fee7fc2 | gzip | 1.10-4ubuntu4.2 | 1 |
| defactops/ | 07b663c0092a | gzip | no fix listed | 1 |
| defectdojo/ | c597abdbb535 | gzip | 1.13-1+deb13u1 | 1 |
| deimosfr/ | 284c4040fc6d | gzip | 1.13-1+deb13u1 | 1 |
| dellcloud/ | 02fc234353a9 | gzip | no fix listed | 1 |
| dellcloud/ | 4d2eb25b9225 | gzip | no fix listed | 1 |
| dependencytrack/ | 1ba4f004e1ec | gzip | 1.13-1+deb13u1 | 1 |
| dependencytrack/ | f1da63ed610a | gzip | 1.13-1+deb13u1 | 1 |
| dessalines/ | 79e9f02c286c | gzip | no fix listed | 1 |
| dessalines/ | ee4c620d8e93 | gzip | 1.13-1+deb13u1 | 1 |
| devopsgoofy/ | ad865312099f | gzip | no fix listed | 1 |
| devopshq/ | 30e093bffa91 | gzip | no fix listed | 1 |
| dgraph/ | b57fa31f9b7f | gzip | 1.12-1ubuntu3.2 | 1 |
| dgraziotin/ | 38f2de42bed0 | gzip | no fix listed | 1 |
| diygod/ | 1d4b508b6357 | gzip | 1.13-1+deb13u1 | 1 |
| diygod/ | 7a6312cac0d5 | gzip | no fix listed | 1 |
| djjudas21/ | ba22be670c37 | gzip | no fix listed | 1 |
| dniel/ | 45a667852f2a | gzip | no fix listed | 1 |
| dobtc/ | a870f7cb1105 | gzip | no fix listed | 1 |
| docmost/ | b56947fcfd08 | gzip | 1.13-1+deb13u1 | 1 |
| dokuwiki/ | f08ecfdda239 | gzip | 1.13-1+deb13u1 | 1 |
| dolibarr/ | 69ec52e3b7ef | gzip | no fix listed | 1 |
| dolibarr/ | 7ad88fc9b13c | gzip | no fix listed | 1 |
| domainmod/ | 4017bfe4c597 | gzip | no fix listed | 1 |
| dongjiang1989/ | 4bf9ae391948 | gzip | no fix listed | 1 |
| dragonflyoss/ | 9fe2a1d6206f | gzip | no fix listed | 1 |
| dragonflyoss/ | edf3e921f4e0 | gzip | no fix listed | 1 |
| dremio/ | 80ed2e3b7c43 | gzip | 1.10-4ubuntu4.2 | 1 |
| drorivry4/ | e035d49b15ca | gzip | no fix listed | 1 |
| drpcorg/ | 8858fae1859d | gzip | 1.10-4ubuntu4.2 | 1 |
| drumsergio/ | 28244054e1bf | gzip | no fix listed | 1 |
| dserio83/ | 6b3d9115fee2 | gzip | no fix listed | 1 |
| dserio83/ | d5deae589229 | gzip | no fix listed | 1 |
| duck1123/ | 0e29f19fa67c | gzip | 1.10-4ubuntu4.2 | 1 |
| duck1123/ | 9d6fb247b714 | gzip | 1.10-4ubuntu4.2 | 1 |
| dzikoysk/ | 4128c2d7a6ba | gzip | 1.12-1ubuntu3.2 | 1 |
| eceasy/ | f9abbf3fa5fe | gzip | no fix listed | 1 |
| eclipseaerios/ | d4ed3d8e5db4 | gzip | 1.13-1+deb13u1 | 1 |
| eclipseaerios/ | 3cc1d94cfe96 | gzip | 1.13-1+deb13u1 | 1 |
| eclipseaerios/ | b433c2b9f5dc | gzip | 1.13-1+deb13u1 | 1 |