StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,592
of 17,797 indexed, latest versions
Container images
2,587
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,592 of 17,797 indexed charts deploy, on 2,587 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,500
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r086
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,592 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,587 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
cccs/assemblyline-rust:4.7.4.stable202be5e6a57427
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable202b88493b62f7
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable20efa75509b854
zlib@1:1.2.13.dfsg-1
no fix listed
1
chaerr/kridge:demo-operator-v0.1.266833deec017
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
chainsafe/lodestar:latest5593f6e97912
zlib@1:1.2.13.dfsg-1
no fix listed
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
zlib@1:1.2.13.dfsg-1
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
klibc@2.0.3-0ubuntu1.14.04.3
zlib@1:1.2.8.dfsg-1ubuntu1.1
no fix listed
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
cheveo/azp-agent:1.0.282240f890884
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
rsync@3.1.1-3ubuntu1.2
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
chriseaton/adventureworks:latest54c3384ce701
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
chromadb/chroma:1.5.7fc8dc8e11fb2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
circleci/runner:launch-agent9bdc62f02162
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
ciscolabs/msm-nc:0710202336d02faad958
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
citizenstig/httpbin:latestb81c818ccb86
zlib@1:1.2.8.dfsg-2ubuntu4
no fix listed
1
ckan/ckan-base:2.12.087ecf3f27ad6
zlib@1:1.2.13.dfsg-1
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
zlib@1:1.2.13.dfsg-1
no fix listed
1
clickhouse/clickhouse-server:24.81ffa82edee00
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:23.8512bb8a21483
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:26.3810861a2e2d0
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.7c28b8916e10e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.8.3d73903d1b61d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
cloudflare/cloudflared:2026.9.0ff69a2225ad7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
cloudtooling/moodle:5.2.3f4f04e0fc401
zlib@1:1.2.13.dfsg-1
no fix listed
1
cloudve/janis-terminal:latestaf56e77ca587
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
zlib@1:1.2.13.dfsg-1
no fix listed
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
zlib@1:1.2.13.dfsg-1
no fix listed
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
zlib@1:1.2.13.dfsg-1
no fix listed
1
cm2network/squad:latest8cba47f53df5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
zlib@1:1.2.13.dfsg-1
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
zlib@1:1.2.13.dfsg-1
no fix listed
1
codedesignplus/ms-licenses-grpc:latest360144457f4d
zlib@1:1.2.13.dfsg-1
no fix listed
1
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
zlib@1:1.2.13.dfsg-1
no fix listed
1
collabora/code:24.04.13.2.101dc4ab83977
zlib@1:1.2.13.dfsg-1
no fix listed
1
collabora/code:23.05.10.1.105299b452f7f
zlib@1:1.2.13.dfsg-1
no fix listed
1
concourse/concourse:8.3.040a143ce5873
zlib@1.3.2-r4
1.3.2.1_rc20260601-r0
1
conductoross/conductor:3.31.09fba127693e6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.