StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,592
of 17,797 indexed, latest versions
Container images
2,587
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,592 of 17,797 indexed charts deploy, on 2,587 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,500
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r086
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,592 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,587 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
consensys/teku:latest3a4f5761ae1c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
consensys/teku:25.4.1bf6ecd2ea716
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
consensys/web3signer:latestf146a51a1ba3
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
zlib@1:1.2.13.dfsg-1
no fix listed
1
continuoussecuritytooling/keycloak-reporting-cli:1.3.3f04ecefab64e
zlib@1:1.2.13.dfsg-1
no fix listed
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
cortezaproject/corteza:2024.9.08eb7a26605c9
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
zlib@1:1.2.13.dfsg-1
no fix listed
1
coturn/coturn:4.10.0-r1f4c2af06c3c5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
cradlepoint/pgbouncer:1.0.18f5720b0cd03
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
cribl/cribl:3.0.2762747cb6796
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
zlib@1:1.2.8.dfsg-2ubuntu4.3
no fix listed
1
cspconsole/config-provider:1.0.365524a26a6c23
zlib@1:1.2.13.dfsg-1
no fix listed
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
zlib@1:1.2.13.dfsg-1
no fix listed
1
cspconsole/report-collector:1.0.15839750248193b
zlib@1:1.2.13.dfsg-1
no fix listed
1
cspconsole/report-processor:1.0.279a2d8840bfdf
zlib@1:1.2.13.dfsg-1
no fix listed
1
cubejs/cubestore:v1.5.334ac523a9bab
zlib@1:1.2.13.dfsg-1
no fix listed
1
curtismager20/mcp-orchestrator:3.8.312c8bdd49aaee
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
zlib@1:1.2.13.dfsg-1
no fix listed
1
cyverse/irods-csi-driver:v0.12.0aa69d105b292
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
zlib@1:1.2.13.dfsg-1
no fix listed
1
daedalusproject/base_kubectl:latest6f72b5119eda
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
dagster/dagster-celery-k8s:1.13.230505973033e1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
dagster/dagster-cloud-agent:1.13.2322036fc83927
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
zlib@1:1.2.13.dfsg-1
no fix listed
1
dannielkil/book-frontend:latest937993927694
zlib@1:1.2.13.dfsg-1
no fix listed
1
dariomader/twampy:v0.0.2d2f4a8c5e690
zlib@1.3-r2
1.3.2.1_rc20260601-r0
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
darthsim/imgproxy:v3.26476cb08c816a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
darthsim/imgproxy:latestf247c72df1d7
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
daskdev/dask-notebook:1.1.0052630f5ca04
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
1
datadog/agent:6aad9994de6a7
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
zlib@1:1.2.13.dfsg-1
no fix listed
1
datafuselabs/databend-query:v1.2.279a936843b85b4
zlib@1:1.2.13.dfsg-1
no fix listed
1
datalayers/datalayers:v2.2.1017b292079239
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
datalust/seq:5.0.832-pre9c731bb207a6
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
dbgate/dbgate:7.2.3f2dc7423ea88
zlib@1:1.2.13.dfsg-1
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ddosify/alaz:v0.12.0ea602056d9ce
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
zlib@1:1.2.13.dfsg-1
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.