StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,396
of 17,828 indexed, latest versions
Container images
2,407
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,396 of 17,828 indexed charts deploy, on 2,407 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,394
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,396 by stars
ChartLatestAffected imagesRadar Score
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

7,325
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

8,084
iam-eks-user-mapperiam-eks-user-mapper1.6.01 of 1See more

iam-eks-user-mapper iam-eks-user-mapper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,709
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,118
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1
jenkins/jenkins:ltsc1e4c349365f
bzip2@1.0.8-6
no fix listed

Open the chart page →

117,800
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
bzip2@1.0.6-8.1
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

12,672
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1

Open the chart page →

84,293
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
bzip2@1.0.6-8
1.0.6-8ubuntu0.2+esm1

Open the chart page →

19,345
ibm-ucv-prodibm-helm5.3.02 of 16See more

ibm-ucv-prod ibm-helm 5.3.0

2 of the 16 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
bzip2@1.0.8-5+b1
no fix listed
bitnamilegacy/rabbitmq:4.1.2fac502149c40
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

12,169
icegateicegateVerified publisher0.1.13 of 3See more

icegate icegate 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,659
codex-poolericoretechVerified publisher0.8.91 of 1See more

codex-pooler icoretech 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/icoretech/codex-pooler:0.8.054609b857b47
bzip2@1.0.8-6
no fix listed

Open the chart page →

583
metamcpicoretechVerified publisher0.3.111 of 2See more

metamcp icoretech 0.3.11

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,272
multicaicoretechVerified publisher0.5.11See more

multica icoretech 0.5.1

1 container image this version deploys carries CVE-2026-42250.

Container imageDigestPackageFixed in
pgvector/pgvector:pg17cf134a767f47
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

—
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,593
tolgeeicoretechVerified publisher0.49.31See more

tolgee icoretech 0.49.3

1 container image this version deploys carries CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
bzip2@1.0.8-6
no fix listed

Open the chart page →

—
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
library/mongo:5.0.6-focal8e70544b6c76
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/rabbitmq:3.9-management8a279e9396a8
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

27,947
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

9,256
ikigaiikigai-chartVerified publisher0.0.94 of 58See more

ikigai ikigai-chart 0.0.9

4 of the 58 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/zookeeper:3.8-temurin55d1e5b2e601
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

113,437
ilum-apiilumVerified publisher6.7.31 of 1See more

ilum-api ilum 6.7.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,171
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,552
ilum-marquezilumVerified publisher6.7.02 of 3See more

ilum-marquez ilum 6.7.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
bzip2@1.0.8-5+b1
no fix listed
ilum/marquez:0.54.06e1d709d41f8
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,216
ilum-streamlitilumVerified publisher0.1.01 of 1See more

ilum-streamlit ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ilum/streamlit-example:1.0.0ce5dcdeb22ba
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,769
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

11,904
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,887
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,593
plausible-analyticsimioVerified publisher0.4.23 of 5See more

plausible-analytics imio 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
bzip2@1.0.8-5+b1
no fix listed
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
bzip2@1.0.8-5+b1
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

10,713
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,251
apexkube-agentimprowisedVerified publisher1.4.01 of 2See more

apexkube-agent improwised 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

3,374
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

16,423
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

5,423
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,833
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,561
impulseimpulse1.0.171 of 1See more

impulse impulse 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/eslupmi/impulse:v3.7.1186a24030e82
bzip2@1.0.8-6
no fix listed

Open the chart page →

976
influxdb3-coreinfluxdata0.1.11 of 1See more

influxdb3-core influxdata 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/influxdb:3.10.5-core695a8063ff10
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

872
influxdb3-enterpriseinfluxdata0.12.11See more

influxdb3-enterprise influxdata 0.12.1

1 container image this version deploys carries CVE-2026-42250.

Container imageDigestPackageFixed in
library/influxdb:3.11.2-enterprise6ce2bf22499b
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

—
influxdb-enterpriseinfluxdata0.2.12 of 2See more

influxdb-enterprise influxdata 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/influxdb:1.12.3-meta8812029260b5
bzip2@1.0.8-5+b1
no fix listed
library/influxdb:1.12.3-datab0f9fc41ed79
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,044
ai-stackinfracloud-chartsVerified publisher0.6.11 of 3See more

ai-stack infracloud-charts 0.6.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,244
chromadbinfracloud-chartsVerified publisher0.3.01 of 1See more

chromadb infracloud-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,244
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,084
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,933
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,887
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

10,602
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

76,155
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

89,182
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

76,155
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

81,922
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

6,020
intelowlintelowl-helm6.6.1-01-06-20262 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

2 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
bzip2@1.0.8-5+b1
no fix listed
library/redis:8.6.34d25e2fe601f
bzip2@1.0.8-6
no fix listed

Open the chart page →

18,225
interbtc-parachaininterlay0.4.131 of 1See more

interbtc-parachain interlay 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

3,217
interbtc-vaultinterlay0.1.131 of 1See more

interbtc-vault interlay 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
interlayhq/interbtc-clients:vault-masterc3e311de67da
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

3,894

Container images carrying it

2,407 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-42250.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.