StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,439
of 17,821 indexed, latest versions
Container images
2,454
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,439 of 17,821 indexed charts deploy, on 2,454 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,441
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,439 by stars
ChartLatestAffected imagesRadar Score
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
bzip2@1.0.8-6
no fix listed

Open the chart page →

3,524
rundeckdwardu-helm-charts0.3.42 of 2See more

rundeck dwardu-helm-charts 0.3.4

2 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
bzip2@1.0.8-6
no fix listed
rundeck/rundeck:3.2.74d64fe56f767
bzip2@1.0.6-8ubuntu0.2
1.0.6-8ubuntu0.2+esm1

Open the chart page →

19,931
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

9,296
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

1,782
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

2,001
gcp-local-ssd-raiddysnixVerified publisher0.1.71 of 2See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,213
rethdysnixVerified publisher0.0.111 of 2See more

reth dysnix 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

1,095
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,426
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,477
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,636
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,646
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,636
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,610
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
bzip2@1.0.8-6
no fix listed

Open the chart page →

13,647
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

9,831
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,621
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,277
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,445
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,970
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

1,873
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

11,044
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

20,287
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

5,179
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,085
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
bzip2@1.0.8-6
no fix listed

Open the chart page →

3,145
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,057
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

7,481
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

30,740
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

4,004
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

8,070
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,618
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

1,519
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
library/memcached:1.675c93cc91e76
bzip2@1.0.8-6
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

92,585
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

1,068
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,024
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

10,673
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
emqx/ecp-ui:2.5.1e33e9816f147
bzip2@1.0.8-5+b1
no fix listed
library/telegraf:1.27507a3eecf809
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

24,090
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

2,763
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,150
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,925
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

2,174
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

3,934
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

5,179
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,593
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
bzip2@1.0.8-6
no fix listed

Open the chart page →

7,384
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
library/rabbitmq:3-managemente582c0bc7766
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

27,479
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
library/mongo:5.0-focal5e15a3f014ed
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

27,884
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
codeurjc/toposervice:v1.09fb4c11e6a49
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
library/mongo:5.0.6-focal8e70544b6c76
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

32,557
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
library/mongo:5.0-focal5e15a3f014ed
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/rabbitmq:3.11-managementc3f70098e01d
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
mastercloudapps/planner:v1.2340a950b311b2
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

27,884
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
library/rabbitmq:3-managemente582c0bc7766
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
oscarsotosanchez/weatherservice:v1.0911ec961d10b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

27,444

Container images carrying it

2,454 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
bzip2@1.0.8-5+b1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
bzip2@1.0.8-5+b1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.