StackRadar

CVE-2026-41992

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,258
of 17,803 indexed, latest versions
Container images
2,216
deployed by those charts
Fix available
3 of 3
affected packages

Security update for gzip

Carried by container images the latest versions of 2,258 of 17,803 indexed charts deploy, on 2,216 images.

Affected packageAffected versionsFixed inImages
gzipdeb1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more2,207
gzipapk1.13-r0, 1.14-r21.13-r1, 1.14-r33
gziprpm1.10-150200.10.11.10-150200.16.16
OSV records
ALPINE-CVE-2026-41992DEBIAN-CVE-2026-41992UBUNTU-CVE-2026-41992ECHO-fad9-e6ab-e1e3SUSE-SU-2026:3592-1
Also known as
USN-8512-1, USN-8733-1

Charts affected

2,258 by stars
ChartLatestAffected imagesRadar Score
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2

Open the chart page →

2,156
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,330
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gzip@1.12-1
no fix listed

Open the chart page →

2,710
changedetection-iozekker6Verified publisher1.101.01 of 1See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
gzip@1.12-1
no fix listed

Open the chart page →

2,649
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41992.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gzip@1.6-5ubuntu1.1
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

9,280

Container images carrying it

2,216 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
gzip@1.12-1
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
gzip@1.12-1
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
gzip@1.12-1
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
gzip@1.12-1
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
gzip@1.12-1
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
gzip@1.12-1
no fix listed
1
spy86/rabbitmq-stomp:latestea649101b9fb
gzip@1.10-0ubuntu4.1
no fix listed
1
sslhep/servicex_app:v1.8.51d12f943cec5
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
gzip@1.13-1
1.13-1+deb13u1
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
gzip@1.13-1
1.13-1+deb13u1
1
stackstorm/st2actionrunner:3.888235ba70cad
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2api:3.86f56d239d280
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2web:3.809989a26c8b7
gzip@1.10-0ubuntu4.1
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
gzip@1.10-0ubuntu4.1
no fix listed
1
stalwartlabs/stalwart:v0.16.1425001929f36a
gzip@1.13-1
1.13-1+deb13u1
1
stalwartlabs/stalwart:v0.16.22388dcb75a707
gzip@1.13-1
1.13-1+deb13u1
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
gzip@1.13-1
1.13-1+deb13u1
1
stalwartlabs/stalwart:v0.15.5dcf575db2d53
gzip@1.13-1
1.13-1+deb13u1
1
stashapp/stash:latest24dbd7607174
gzip@1.10-0ubuntu4
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
1
statcan/ckan:2.93921305425b8
gzip@1.10-0ubuntu4
no fix listed
1
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
gzip@1.12-1
no fix listed
1
strangebee/thehive:5.8.0-1a7f7b05fba24
gzip@1.12-1
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
gzip@1.10-0ubuntu4
no fix listed
1
structurizr/onpremises:2025.11.094b5ffb5119c8
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
1
substratusai/verba:v0.4.0-baseURL261695be635eb
gzip@1.12-1
no fix listed
1
supabase/edge-runtime:v1.74.02781daf92394
gzip@1.12-1
no fix listed
1
supabase/edge-runtime:v1.59.0eff9c554d649
gzip@1.12-1
no fix listed
1
supabase/logflare:latest49bfe526f1b4
gzip@1.13-1
1.13-1+deb13u1
1
supabase/postgres-meta:v0.96.6a84cc713585e
gzip@1.12-1
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
gzip@1.12-1
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
gzip@1.12-1
no fix listed
1
supabase/realtime:v2.33.8d207e6e23ad3
gzip@1.12-1
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
gzip@1.13-1
1.13-1+deb13u1
1
supabase/studio:20241021-9f9b08326d8070c55e9
gzip@1.12-1
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
gzip@1.12-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.