StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,647
of 17,821 indexed, latest versions
Container images
2,673
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,647 of 17,821 indexed charts deploy, on 2,673 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,622
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r050
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+9 moreno fix listed31
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3, 2.0.4-9ubuntu2, 2.0.13-4ubuntu0.2no fix listed9
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,647 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,673 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
beanbag/reviewboard:latest6b840f546e1c
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
zlib@1:1.2.13.dfsg-1
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
bicarus/mx-notifier:1.1.8bed688d16762
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/git:latest4b08d0c5af8d
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kubectl:1.301249fc292e84
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kubectl:1.3164614ef8290f
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/kube-state-metrics:204a3044b384b
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mongodb:latestb0652af9c8d0
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
zlib@1:1.2.13.dfsg-1
no fix listed
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.