StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,434
of 17,805 indexed, latest versions
Container images
2,410
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,434 of 17,805 indexed charts deploy, on 2,410 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,397
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,434 by stars
ChartLatestAffected imagesRadar Score
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,679
kuberestkuberestVerified publisher1.4.01 of 1See more

kuberest kuberest 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
sebt3/kuberest:1.4.00ccce5d6d4d2
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

1,100
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
bzip2@1.0.8-6
no fix listed

Open the chart page →

4,590
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

34,172
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.22 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/influxdb:2.8571eb4514977
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
bzip2@1.0.8-6
no fix listed

Open the chart page →

5,595
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,413
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,080
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

29,426
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

39,867
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,515
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,574
databend-metakubesphere-stable0.7.31 of 1See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,868
databend-querykubesphere-stable0.8.31 of 1See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
datafuselabs/databend-query:v1.2.279a936843b85b4
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,868
deepflowkubesphere-stable6.2.6062 of 8See more

deepflow kubesphere-stable 6.2.606

2 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

18,496
iomeshkubesphere-stable1.1.04 of 25See more

iomesh kubesphere-stable 1.1.0

4 of the 25 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
iomesh/node-disk-exporter:1.8.0f03148764f38
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
iomesh/node-disk-manager:1.8.0002c4b92fd34
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
iomesh/node-disk-operator:1.8.0f6c76380db34
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

49,067
IOMeshkubesphere-stable1.2.04 of 25See more

IOMesh kubesphere-stable 1.2.0

4 of the 25 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
iomesh/node-disk-exporter:1.8.0f03148764f38
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
iomesh/node-disk-manager:1.8.0-2292ad270082e
bzip2@1.0.8-5.1
1.0.8-5.1ubuntu0.1
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
bzip2@1.0.8-5.1
1.0.8-5.1ubuntu0.1

Open the chart page →

46,756
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

91,441
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

6,724
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
bzip2@1.0.6-8ubuntu0.2
1.0.6-8ubuntu0.2+esm1

Open the chart page →

18,552
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

9,651
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

7,405
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1

Open the chart page →

9,424
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

7,405
vector-controllerkubevela0.2.31 of 2See more

vector-controller kubevela 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
oamdev/vector-controller:v0.2.39dd8be44ffc9
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

4,819
kubevoipkubevoipOfficialVerified publisher0.6.81 of 1See more

kubevoip kubevoip 0.6.8

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,125
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
bzip2@1.0.8-6
no fix listed

Open the chart page →

8,844
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
penpotapp/exporter:2.2.15c835ffd87ab
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

17,071
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.43 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
bzip2@1.0.8-6
no fix listed
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

20,551
ctrlmeshkusionstackVerified publisher0.2.01 of 1See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

3,489
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

63,724
sample-operatorkusionstackVerified publisher0.1.21 of 1See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
chaerr/kridge:demo-operator-v0.1.266833deec017
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

2,523
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

3,172
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
bzip2@1.0.8-5.1
1.0.8-5.1ubuntu0.1

Open the chart page →

3,403
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

16,732
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

7,863
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,885
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

26,559
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

20,279
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

20,279
kubernetes-dashboardlbenicio-communityVerified publisher7.14.91 of 5See more

kubernetes-dashboard lbenicio-community 7.14.9

1 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/kong:3.92a8cf3b110cd
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

2,330
smtplbenicio-communityVerified publisher0.1.31 of 1See more

smtp lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,374
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

33,836
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
bzip2@1.0.8-6
no fix listed

Open the chart page →

4,492
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

4,296
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,090
vaultwardenleprechaun-charts0.1.281 of 1See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,080
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,672
libredb-studiolibredb-studio-oci0.1.651 of 1See more

libredb-studio libredb-studio-oci 0.1.65

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.16.0fa925884368a
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,192
librenmslibrenms10.1.21 of 5See more

librenms librenms 10.1.2

1 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/redis:8.10.1602d361c4da9
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,743
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

4,480

Container images carrying it

2,410 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
bzip2@1.0.8-6
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
bzip2@1.0.8-5+b1
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.