StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,361
of 17,813 indexed, latest versions
Container images
2,370
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,361 of 17,813 indexed charts deploy, on 2,370 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,357
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,361 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,370 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/camptocamp/pgbouncer:latest19dc5663cac4
bzip2@1.0.8-6
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
1
ghcr.io/caninehq/canine:latesta058034ca006
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
bzip2@1.0.8-6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
bzip2@1.0.8-6
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
bzip2@1.0.8-6
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
bzip2@1.0.8-6
no fix listed
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/containeroo/filesystem-exporter:v1.5.2a66121e16d4e
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
bzip2@1.0.8-6
no fix listed
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
bzip2@1.0.8-6
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
bzip2@1.0.8-6
no fix listed
1
ghcr.io/dakera-ai/dakera-mcp:0.10.11a3d48418b14a
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
bzip2@1.0.8-6
no fix listed
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
bzip2@1.0.8-6
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
bzip2@1.0.8-6
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
bzip2@1.0.8-6
no fix listed
1
ghcr.io/dask/dask:2024.1.0080150de7d86
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
bzip2@1.0.8-6
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/defguard/defguard:2.1.0df2e31d3b4f5
bzip2@1.0.8-6
no fix listed
1
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
bzip2@1.0.8-6
no fix listed
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
bzip2@1.0.8-6
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
bzip2@1.0.8-6
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
bzip2@1.0.8-6
no fix listed
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
bzip2@1.0.8-6
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.3:latestecacd9fd0c66
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/ding113/claude-code-hub:latest87f9e8a92bd7
bzip2@1.0.8-6
no fix listed
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
bzip2@1.0.8-6
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.