StackRadar

CVE-2026-41992

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,245
of 17,803 indexed, latest versions
Container images
2,198
deployed by those charts
Fix available
3 of 3
affected packages

Security update for gzip

Carried by container images the latest versions of 2,245 of 17,803 indexed charts deploy, on 2,198 images.

Affected packageAffected versionsFixed inImages
gzipdeb1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more2,189
gzipapk1.13-r0, 1.14-r21.13-r1, 1.14-r33
gziprpm1.10-150200.10.11.10-150200.16.16
OSV records
ALPINE-CVE-2026-41992DEBIAN-CVE-2026-41992UBUNTU-CVE-2026-41992ECHO-fad9-e6ab-e1e3SUSE-SU-2026:3592-1
Also known as
USN-8512-1, USN-8733-1

Charts affected

2,245 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,198 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:2.4.091e963bfda56
gzip@1.12-1
no fix listed
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
gzip@1.12-1
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
gzip@1.10-0ubuntu4
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
gzip@1.12-1
no fix listed
1
luligu/matterbridge:3.10.9c01108d904ec
gzip@1.13-1
1.13-1+deb13u1
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-audit:2.0.079428add7f38
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
gzip@1.10-0ubuntu4
no fix listed
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
gzip@1.10-0ubuntu4
no fix listed
1
machines/filestash:latest0b8fc005e52e
gzip@1.13-1
1.13-1+deb13u1
1
makemake1337/blutgang:latest8a55174fc830
gzip@1.12-1
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
gzip@1.13-1
1.13-1+deb13u1
1
makersquad/harp-proxy:0.8.1a40dd258c527
gzip@1.12-1
no fix listed
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
gzip@1.10-0ubuntu4.1
no fix listed
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
gzip@1.13-1
1.13-1+deb13u1
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
gzip@1.13-1
1.13-1+deb13u1
1
maptiler/server:4.8.07e206140057b
gzip@1.10-0ubuntu4.1
no fix listed
1
marcoimme/oidcmock:latestb6035c0721a8
gzip@1.13-1
1.13-1+deb13u1
1
mariusm/vingress:0.5.0b3db186c3d72
gzip@1.13-1
1.13-1+deb13u1
1
martinhelmich/typo3:12.4c83a4f3fd7ae
gzip@1.12-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
gzip@1.12-1
no fix listed
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
gzip@1.12-1
no fix listed
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
gzip@1.12-1
no fix listed
1
matterlabs/external-node:v24.0.06cbfea4c694a
gzip@1.12-1
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
gzip@1.12-1
no fix listed
1
mawad98/backstage-pyactions:demo99422c56a274
gzip@1.13-1
1.13-1+deb13u1
1
mbround18/valheim:3.1.070bd4da591cd
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
mediagis/nominatim:5.3.27923a8e67197
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2
1
mediagis/nominatim:3.7c15e941485ef
gzip@1.10-0ubuntu4.1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
gzip@1.13-1
1.13-1+deb13u1
1
merlos/zookeeper:3.9.3a38fc7e09ed7
gzip@1.12-1
no fix listed
1
middlewareeng/middleware:0.3.1747d880812f1
gzip@1.12-1
no fix listed
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
milvusdb/milvus:v2.2.13a3a55e1c1497
gzip@1.10-0ubuntu4.1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
gzip@1.13-1
1.13-1+deb13u1
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
gzip@1.10-0ubuntu4.1
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
gzip@1.12-1
no fix listed
1
miqm/session-scaler:0.1.0c5c211717d9b
gzip@1.12-1
no fix listed
1
mlikiowa/napcat-docker:latest1336a777f9a4
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
gzip@1.12-1
no fix listed
1
moreillon/api-proxy:latestd7d4a5463525
gzip@1.12-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.