StackRadar

CVE-2026-41991

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,258
of 17,803 indexed, latest versions
Container images
2,216
deployed by those charts
Fix available
2 of 2
affected packages

Security update for gzip

Carried by container images the latest versions of 2,258 of 17,803 indexed charts deploy, on 2,216 images.

Affected packageAffected versionsFixed inImages
gzipdeb1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more2,207
gziprpm1.10-150200.10.1, 1.13-160000.2.21.10-150200.13.1, 1.13-160000.3.19
OSV records
DEBIAN-CVE-2026-41991UBUNTU-CVE-2026-41991ECHO-233f-78f2-a73bSUSE-SU-2026:22818-1SUSE-SU-2026:3269-1
Also known as
USN-8512-1, USN-8733-1

Charts affected

2,258 by stars
ChartLatestAffected imagesRadar Score
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2

Open the chart page →

2,156
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,330
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gzip@1.12-1
no fix listed

Open the chart page →

2,710
changedetection-iozekker6Verified publisher1.101.01 of 1See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
gzip@1.12-1
no fix listed

Open the chart page →

2,649
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gzip@1.6-5ubuntu1.1
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

9,280

Container images carrying it

2,216 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
shaowenchen/ops-server:latest315444f703f4
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
sharanalwar/redchef-backend:latest8d3cab80df49
gzip@1.12-1
no fix listed
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
gzip@1.6-5ubuntu1
no fix listed
1
shwcloud/seawise-backup:v1.7.1a97479a54df4
gzip@1.13-1
1.13-1+deb13u1
1
signalen/backend:2.50.14760256000738
gzip@1.12-1
no fix listed
1
signoz/signoz-otel-collector:v0.144.1034ecb436b687
gzip@1.12-1
no fix listed
1
sigp/lighthouse:v7.0.12cae720e9a35
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
sigp/lighthouse:v7.1.0870934e38931
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
sigp/lighthouse:v2.1.2ad501f02cfef
gzip@1.10-0ubuntu4
no fix listed
1
sigp/siren:v3.0.42c219b04758e
gzip@1.12-1
no fix listed
1
sigscale/cse:latest67d0c886516b
gzip@1.12-1
no fix listed
1
sigscale/ocs:latest3c1bdc9732e2
gzip@1.12-1
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
gzip@1.12-1
no fix listed
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
gzip@1.12-1
no fix listed
1
sirrend/helmup-notifications-service:0.1.3997866417011
gzip@1.12-1
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
gzip@1.6-5ubuntu1
no fix listed
1
sissbruecker/linkding:1.35.00c5dddf0b37c
gzip@1.12-1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
gzip@1.12-1
no fix listed
1
sissbruecker/linkding:1.47.0e35cb50e0581
gzip@1.13-1
1.13-1+deb13u1
1
slagattollas/weatherservice-practica:latest68e7f56393fc
gzip@1.6-5ubuntu1
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2
1
snipe/snipe-it:v6.0.1455fb7636a98c
gzip@1.10-0ubuntu4.1
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
gzip@1.10-0ubuntu4.1
no fix listed
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
gzip@1.6-5ubuntu1.2
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
gzip@1.12-1
no fix listed
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
gzip@1.6-5ubuntu1.2
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
gzip@1.12-1
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
gzip@1.12-1
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
gzip@1.12-1
no fix listed
1
softwaremill/bootzooka:latest845b5e8f8056
gzip@1.14-1~exp2ubuntu1
1.14-1~exp2ubuntu1.1
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
gzip@1.12-1
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
gzip@1.12-1
no fix listed
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
gzip@1.12-1
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
gzip@1.12-1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
gzip@1.10-0ubuntu4.1
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
gzip@1.12-1
no fix listed
1
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
gzip@1.12-1
no fix listed
1
sondresjo/bobby-api:latestfe534731909a
gzip@1.12-1
no fix listed
1
sondresjo/garge-app:v1.20.70382ebf9dfc8
gzip@1.12-1
no fix listed
1
sondresjo/nstuning-app:v1.6.113a6795bf36da
gzip@1.12-1
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
gzip@1.13-1
1.13-1+deb13u1
1
speckle/speckle-preview-service:2.26.3092384dba45d
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
gzip@1.12-1
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
gzip@1.12-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.