StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,585
of 17,803 indexed, latest versions
Container images
2,574
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,585 of 17,803 indexed charts deploy, on 2,574 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,487
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r086
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 39 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,585 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,574 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
gethue/hue:4.11.011b649636e68
rsync@3.1.3-8ubuntu0.4
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
rsync@3.1.2-2.1ubuntu1.1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
1
glasskube/operator:0.12.2be5133100d63
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
glpi/glpi:latest4b681082a79e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
zlib@1.3.2-r3
1.3.2.1_rc20260601-r0
1
gocd/gocd-server:v26.1.0720d1012b93f
zlib@1.3.2-r3
1.3.2.1_rc20260601-r0
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
zlib@1:1.2.13.dfsg-1
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
zlib@1:1.2.13.dfsg-1
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
zlib@1:1.2.13.dfsg-1
no fix listed
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
gorules/brms:latest3cd59e25efad
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gotenberg/gotenberg:8-chromiuma40f92d7419a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
zlib@1.3.1-r51
1.3.2.1_rc20260601-r0
1
gradiant/open5gs-dbctl:0.10.3332031245fce
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/agent:v0.44.23364714a2f64
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.5.101a63f4e032c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.4.306bdcbb51fc2
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.18.10f4434c92b3e
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.18.0491b0578c049
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.16.384b76d56c594
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.11.38c7256f412fe
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.19.2b8ec653c4423
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/alloy:v1.14.0f50931848bd8
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/beyla:1.3.336d07f8d276e
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/promtail:3.5.165bfae480b57
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
grafana/promtail:3.6.18dcfdf466da0
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
graphprotocol/graph-node:latestb0436347fb24
zlib@1:1.2.13.dfsg-1
no fix listed
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
zlib@1:1.2.13.dfsg-1
no fix listed
1
graylog/graylog:6.1.1019de1aff48c2
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
graylog/graylog:7.1.9598bd41fefd5
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
graylog/graylog:7.2.0-beta.3-1bf3e1e7b7352
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
greenkube/greenkube:0.3.00c01932282a4
zlib@1:1.2.13.dfsg-1
no fix listed
1
gremlin/gremlin:latest0e74ccea1129
zlib@1.3.2-r4
1.3.2.1_rc20260601-r0
1
grpl/grapple-cli:0.2.127c00aafee6629
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
guacamole/guacamole:1.5.50f62f6d17ab3
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.