StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,403
of 17,790 indexed, latest versions
Container images
2,396
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,403 of 17,790 indexed charts deploy, on 2,396 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,377
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.119
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,403 by stars
ChartLatestAffected imagesRadar Score
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,849
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
yandex/clickhouse-server:21.3.204eccfffb01d7
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

7,929

Container images carrying it

2,396 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
bzip2@1.0.8-5+b1
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
bzip2@1.0.8-6
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
bzip2@1.0.8-6
no fix listed
2
gotson/komga:1.26.36c2a967bbe9a
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
2
gradiant/ueransim:3.2.6015b30d5fa0f
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
grafana/alloy:v1.8.17790f6f7fbd8
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
grafana/alloy:v1.12.2f94b1c82957a
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
bzip2@1.0.8-6
no fix listed
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
bzip2@1.0.8-6
no fix listed
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
bzip2@1.0.8-5+b1
no fix listed
2
honestica/kube-iptables-tailer:master-91a393242fb939
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
hookiesolutions/webhookie:latest0629694246ba
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
ilum/api:6.7.3624fd09528c8
bzip2@1.0.8-6
no fix listed
2
ilum/marquez:0.54.06e1d709d41f8
bzip2@1.0.8-5+b1
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
bzip2@1.0.8-6
no fix listed
2
interlayhq/interbtc:latesta66d0e35e70f
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
iomesh/node-disk-exporter:1.8.0f03148764f38
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
2
istio/kubectl:1.5.10dbb7726d1bf0
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
2
istio/proxyv2:1.18.0757d28c24100
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
istio/proxyv2:1.10.3a78b7a165744
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bzip2@1.0.8-5+b1
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
bzip2@1.0.8-6
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
langgenius/dify-sandbox:0.2.009b7e8705673
bzip2@1.0.8-5+b1
no fix listed
2
library/buildpack-deps:curl04907bdd423b
bzip2@1.0.8-6
no fix listed
2
library/cassandra:3.11.65aa8400b4b3b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
2
library/cassandra:4.1.37cbcec0086ac
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
library/debian:stable-slim04634311a8d5
bzip2@1.0.8-6
no fix listed
2
library/elasticsearch:7.17.35e6ac15bf6a5
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
library/elasticsearch:8.19.1289729a95066a
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
library/haproxy:3.2de601ccc9a79
bzip2@1.0.8-6
no fix listed
2
library/influxdb:2.7b8d940ca9376
bzip2@1.0.8-5+b1
no fix listed
2
library/mariadb:10.8.30abf60f81588
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
library/mariadb:10.10334b315c10e5
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
library/mariadb:12.0.2:12.0-noble607835cd628b
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
library/mariadb:11.4611a2fcc5fa7
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
library/mariadb:10.692e50059ea0a
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
library/mariadb:11.3.2e101f9db3191
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
library/mongo:8.0.20098862b1339f
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.