StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,389
of 17,797 indexed, latest versions
Container images
2,370
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,389 of 17,797 indexed charts deploy, on 2,370 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,357
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,389 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,370 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/kubectl:1.301249fc292e84
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/kubectl:1.3164614ef8290f
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/kube-state-metrics:204a3044b384b
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mongodb:latestb0652af9c8d0
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/pgbouncer:1.23.192356da09704
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
bzip2@1.0.8-5+b1
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
bzip2@1.0.8-5+b1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.