StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,602
of 17,821 indexed, latest versions
Container images
2,611
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,602 of 17,821 indexed charts deploy, on 2,611 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,561
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r049
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed30
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3, 2.0.13-4ubuntu0.2no fix listed8
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,602 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,611 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
budibase/proxy:3.41.38d780b6ee602
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
bugsink/bugsink:2ecdd84587746
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
burakince/mlflow:3.16.0ab4b566644b9
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
calltelemetry/web:0.8.1-rc7205d13269e350
zlib@1:1.2.13.dfsg-1
no fix listed
1
camptocamp/mapserver:latestbf2e8e118c9b
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
camunda/zeebe:8.4.5ab5abc09e407
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
carbone/carbone-ee:full-5.11.0518172cbad49
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
zlib@1:1.2.13.dfsg-1
no fix listed
1
castai/hibernate:v0.14da62858c8381
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
castlemock/castlemock:latestb7f3f1527ba9
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
zlib@1:1.2.13.dfsg-1
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
cccs/assemblyline-core:4.7.4.stable20098127270065
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable202be5e6a57427
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable202b88493b62f7
zlib@1:1.2.13.dfsg-1
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable20efa75509b854
zlib@1:1.2.13.dfsg-1
no fix listed
1
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
chaerr/kridge:demo-operator-v0.1.266833deec017
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
zlib@1:1.2.13.dfsg-1
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
klibc@2.0.3-0ubuntu1.14.04.3
zlib@1:1.2.8.dfsg-1ubuntu1.1
no fix listed
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
cheveo/azp-agent:1.0.282240f890884
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
rsync@3.1.1-3ubuntu1.2
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
chriseaton/adventureworks:latest54c3384ce701
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
chromadb/chroma:1.5.7fc8dc8e11fb2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
circleci/runner:launch-agent9bdc62f02162
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
ciscolabs/msm-nc:0710202336d02faad958
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
citizenstig/httpbin:latestb81c818ccb86
zlib@1:1.2.8.dfsg-2ubuntu4
no fix listed
1
ckan/ckan-base:2.12.087ecf3f27ad6
zlib@1:1.2.13.dfsg-1
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
zlib@1:1.2.13.dfsg-1
no fix listed
1
clickhouse/clickhouse-server:24.81ffa82edee00
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:26.74f94badaca11
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:23.8512bb8a21483
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:26.3810861a2e2d0
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.584d05b9c205e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:latesta73b5c0fb6f8
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.8.3d73903d1b61d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.