StackRadar

CVE-2026-41991

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,258
of 17,803 indexed, latest versions
Container images
2,216
deployed by those charts
Fix available
2 of 2
affected packages

Security update for gzip

Carried by container images the latest versions of 2,258 of 17,803 indexed charts deploy, on 2,216 images.

Affected packageAffected versionsFixed inImages
gzipdeb1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more2,207
gziprpm1.10-150200.10.1, 1.13-160000.2.21.10-150200.13.1, 1.13-160000.3.19
OSV records
DEBIAN-CVE-2026-41991UBUNTU-CVE-2026-41991ECHO-233f-78f2-a73bSUSE-SU-2026:22818-1SUSE-SU-2026:3269-1
Also known as
USN-8512-1, USN-8733-1

Charts affected

2,258 by stars
ChartLatestAffected imagesRadar Score
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
gzip@1.12-1
no fix listed

Open the chart page →

14,737
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
gzip@1.12-1
no fix listed

Open the chart page →

3,864
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
gzip@1.12-1
no fix listed

Open the chart page →

3,864
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
gzip@1.12-1
no fix listed

Open the chart page →

22,020
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
gzip@1.6-5ubuntu1
no fix listed

Open the chart page →

9,006
dnsmasq-k8sdnsmasq-k8s1.4.11 of 1See more

dnsmasq-k8s dnsmasq-k8s 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

3,098
dominodomino-iisasVerified publisher0.3.13 of 3See more

domino domino-iisas 0.3.1

3 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gzip@1.13-1
1.13-1+deb13u1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
gzip@1.12-1
no fix listed
ghcr.io/iisas/domino-rest:latest3009350bfc11
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

10,389
exim4dossif0.2.01 of 1See more

exim4 dossif 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
tianon/exim4:latestb489049cdbca
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,496
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2

Open the chart page →

25,002
healthchecksdoubanVerified publisher1.0.101 of 2See more

healthchecks douban 1.0.10

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
healthchecks/healthchecks:latestaa08a61b0dcf
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,750
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

11,890
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.03 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gzip@1.6-5ubuntu1
no fix listed
library/rabbitmq:3-managemente582c0bc7766
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gzip@1.6-5ubuntu1
no fix listed

Open the chart page →

24,793
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
gzip@1.10-4ubuntu4
1.10-4ubuntu4.2

Open the chart page →

30,804
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
gzip@1.12-1
no fix listed

Open the chart page →

4,486
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

3,509
rundeckdwardu-helm-charts0.3.42 of 2See more

rundeck dwardu-helm-charts 0.3.4

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
gzip@1.13-1
1.13-1+deb13u1
rundeck/rundeck:3.2.74d64fe56f767
gzip@1.6-4ubuntu1
1.6-4ubuntu1+esm2

Open the chart page →

19,905
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
gzip@1.12-1
no fix listed

Open the chart page →

9,439
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

1,773
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2

Open the chart page →

1,991
gcp-local-ssd-raiddysnixVerified publisher0.1.71 of 2See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gzip@1.12-1
no fix listed

Open the chart page →

2,436
rethdysnixVerified publisher0.0.111 of 2See more

reth dysnix 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

1,086
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,483
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,549
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,691
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,702
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,691
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
gzip@1.12-1
no fix listed

Open the chart page →

4,647
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

13,638
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2

Open the chart page →

9,819
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,614
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

2,268
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
gzip@1.12-1
no fix listed

Open the chart page →

2,435
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,945
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gzip@1.6-5ubuntu1.1
no fix listed

Open the chart page →

11,025
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gzip@1.10-0ubuntu4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
gzip@1.6-5ubuntu1
no fix listed

Open the chart page →

20,261
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

5,170
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

2,076
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

3,225
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,050
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

7,445
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
gzip@1.12-1
no fix listed

Open the chart page →

30,645
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

3,986
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
gzip@1.6-5ubuntu1
no fix listed

Open the chart page →

8,060
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,686
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

1,510
seafileeleksbai0.1.12 of 3See more

seafile eleksbai 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/memcached:1.675c93cc91e76
gzip@1.13-1
1.13-1+deb13u1
seafileltd/seafile-mc:9.0.106693911bcc40
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

88,064
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
gzip@1.12-1
no fix listed

Open the chart page →

2,015
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

10,623
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
emqx/ecp-ui:2.5.1e33e9816f147
gzip@1.12-1
no fix listed
library/telegraf:1.27507a3eecf809
gzip@1.12-1
no fix listed

Open the chart page →

23,974
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

2,754

Container images carrying it

2,216 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
gzip@1.12-1
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
gzip@1.13-1
1.13-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
gzip@1.13-1
1.13-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
gzip@1.12-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
gzip@1.12-1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
gzip@1.13-1
1.13-1+deb13u1
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
gzip@1.10-0ubuntu4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
gzip@1.12-1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
gzip@1.12-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
gzip@1.13-1
1.13-1+deb13u1
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
gzip@1.12-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gzip@1.12-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.