StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,592
of 17,797 indexed, latest versions
Container images
2,587
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,592 of 17,797 indexed charts deploy, on 2,587 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,500
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r086
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,592 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,587 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/kubectl:1.30.5744f84cf7493
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kube-state-metrics:204a3044b384b
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:latestb0652af9c8d0
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/pgbouncer:1.23.192356da09704
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.