CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.3; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,651; of 17,805 indexed, latest versions
Container images: 2,647; deployed by those charts
Fix available: 2 of 5; affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,651 of 17,805 indexed charts deploy, on 2,647 images.

Affected package	Affected versions	Fixed in	Images
zlibdeb	1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more	1:1.3.dfsg+really1.3.1-1+e2	2,551
zlibapk	1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more	1.3.2.1_rc20260601-r0	95
rsyncdeb	3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 more	no fix listed	30
klibcdeb	2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3	no fix listed	7
zlibrpm	1.3.1-1.azl3	no fix listed	1

OSV records: CGA-64hx-6x96-r8f7 CGA-6ph6-75jp-484p DEBIAN-CVE-2026-85091 UBUNTU-CVE-2026-85091 AZL-99090 ECHO-2e36-531c-37dd
Also known as: CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,651 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed

Open the chart page →

7,964

Container images carrying it

2,647 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/golang :latest	512690a56605	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/haproxy :3.4.1	0f597665a2a6	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/haproxy :3.1-bookworm	49a0a0d6f0b8	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/haproxy :2.8.28	8baa7d29a27a	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/haproxy :2.9.6	fc5748ff7c72	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/httpd :2.4.63	1ae8051591a5	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/influxdb :2.8	571eb4514977	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/influxdb :3.10.5-core	695a8063ff10	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/influxdb :3.11.2-enterprise	6ce2bf22499b	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/influxdb :1.12.3-meta	8812029260b5	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/influxdb :1.12.3-data	b0f9fc41ed79	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/influxdb :latest	f75e48af0598	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/kibana :7.17.15	0172f1c538e7	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/kibana :8.18.0	04c0fc150f3a	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/kibana :7.17.8	c5781ba340ef	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/kibana :7.17.3	e2e2031c15be	zlib@1:1.2.11.dfsg-2ubuntu1.3	no fix listed	1
library/kong :3.9	12972ce1ab63	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed	1
library/kong :3.8.0	712e407b20ea	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/logstash :7.17.8	17a4f64e9cf5	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/mariadb :10.7.3	07e06f2e7ae9	rsync@3.1.3-8ubuntu0.3 zlib@1:1.2.11.dfsg-2ubuntu1.3	no fix listed no fix listed	1
library/mariadb :10.11.2	1c33370a599c	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mariadb :10.4	22edfe1c7834	rsync@3.1.3-8ubuntu0.7 zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed no fix listed	1
library/mariadb :11	2439dcd7d140	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mariadb :10.8.2-focal	490f01279be1	rsync@3.1.3-8ubuntu0.1 zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed no fix listed	1
library/mariadb :12.0.2	5b6a1eac15b8	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mariadb :12.3.2	628f228f0fd5	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mariadb :10.6.21	8a16204dc96c	rsync@3.1.3-8ubuntu0.9 zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed no fix listed	1
library/mariadb :10.7	9a48ac9f196f	rsync@3.1.3-8ubuntu0.5 zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed no fix listed	1
library/mariadb :12.3.2	a02fe89cb597	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mariadb :12.3.3	ab1c3dd38194	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed	1
library/mariadb :12.2.2	b1cb255a9939	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mariadb :10.10.2	bfc25a68e113	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mariadb :10.6.15	e22328f4d714	rsync@3.1.3-8ubuntu0.7 zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed no fix listed	1
library/mariadb :10.9.4	fbb8456ebdb1	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mariadb :11.7.2	fcc7fcd7114a	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/matomo :5.1.2-apache	2415789e1602	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/matomo :5.13.0-apache	8e6bdd396496	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/memcached :1.6.42	26983a43c918	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/memcached :1.6.40	9ae868852d0b	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/memcached :1.6.40	cc523a19da58	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/memcached :1.6.45	dc561d52bb8a	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/memcached :1.6.42-trixie	e2a8683c7fbb	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/mongo :7.0.14	0032d2ca20db	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mongo :8.0	02a0cc7939f5	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mongo :4.4.13	05678ae4e5e1	zlib@1:1.2.11.dfsg-2ubuntu1.3	no fix listed	1
library/mongo :3.6	146c1fd999a6	zlib@1:1.2.8.dfsg-2ubuntu4.3	no fix listed	1
library/mongo :5.0.32-focal	3b6c281e1c08	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/mongo :4.4-bionic	3d0e6df9fd5b	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mongo :5.0.14-focal	50cae5081ab4	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1