StackRadar

CVE-2026-41991

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,251
of 17,797 indexed, latest versions
Container images
2,207
deployed by those charts
Fix available
2 of 2
affected packages

Security update for gzip

Carried by container images the latest versions of 2,251 of 17,797 indexed charts deploy, on 2,207 images.

Affected packageAffected versionsFixed inImages
gzipdeb1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more2,198
gziprpm1.10-150200.10.1, 1.13-160000.2.21.10-150200.13.1, 1.13-160000.3.19
OSV records
DEBIAN-CVE-2026-41991UBUNTU-CVE-2026-41991ECHO-233f-78f2-a73bSUSE-SU-2026:22818-1SUSE-SU-2026:3269-1
Also known as
USN-8512-1, USN-8733-1

Charts affected

2,251 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gzip@1.6-5ubuntu1.1
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

9,272

Container images carrying it

2,207 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
louislam/its-mytabs:1.7.02e478d3170bd
gzip@1.13-1
1.13-1+deb13u1
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
gzip@1.12-1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
gzip@1.12-1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
gzip@1.12-1
no fix listed
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
gzip@1.12-1
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
gzip@1.10-0ubuntu4
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
gzip@1.12-1
no fix listed
1
luligu/matterbridge:3.10.9c01108d904ec
gzip@1.13-1
1.13-1+deb13u1
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-audit:2.0.079428add7f38
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
gzip@1.10-0ubuntu4
no fix listed
1
machines/filestash:latest0b8fc005e52e
gzip@1.13-1
1.13-1+deb13u1
1
makemake1337/blutgang:latest8a55174fc830
gzip@1.12-1
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
gzip@1.13-1
1.13-1+deb13u1
1
makersquad/harp-proxy:0.8.1a40dd258c527
gzip@1.12-1
no fix listed
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
gzip@1.10-0ubuntu4.1
no fix listed
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
gzip@1.13-1
1.13-1+deb13u1
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
gzip@1.13-1
1.13-1+deb13u1
1
maptiler/server:4.8.07e206140057b
gzip@1.10-0ubuntu4.1
no fix listed
1
marcoimme/oidcmock:latestb6035c0721a8
gzip@1.13-1
1.13-1+deb13u1
1
mariusm/vingress:0.5.0b3db186c3d72
gzip@1.13-1
1.13-1+deb13u1
1
martinhelmich/typo3:12.4c83a4f3fd7ae
gzip@1.12-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
gzip@1.12-1
no fix listed
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
gzip@1.12-1
no fix listed
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
gzip@1.12-1
no fix listed
1
matterlabs/external-node:v24.0.06cbfea4c694a
gzip@1.12-1
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
gzip@1.12-1
no fix listed
1
mawad98/backstage-pyactions:demo99422c56a274
gzip@1.13-1
1.13-1+deb13u1
1
mbround18/valheim:3.1.070bd4da591cd
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
mediagis/nominatim:5.3.27923a8e67197
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2
1
mediagis/nominatim:3.7c15e941485ef
gzip@1.10-0ubuntu4.1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
gzip@1.13-1
1.13-1+deb13u1
1
merlos/zookeeper:3.9.3a38fc7e09ed7
gzip@1.12-1
no fix listed
1
middlewareeng/middleware:0.3.1747d880812f1
gzip@1.12-1
no fix listed
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
milvusdb/milvus:v2.2.13a3a55e1c1497
gzip@1.10-0ubuntu4.1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
gzip@1.13-1
1.13-1+deb13u1
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
gzip@1.10-0ubuntu4.1
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
gzip@1.12-1
no fix listed
1
miqm/session-scaler:0.1.0c5c211717d9b
gzip@1.12-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.