CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.3; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,651; of 17,805 indexed, latest versions
Container images: 2,647; deployed by those charts
Fix available: 2 of 5; affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,651 of 17,805 indexed charts deploy, on 2,647 images.

Affected package	Affected versions	Fixed in	Images
zlibdeb	1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more	1:1.3.dfsg+really1.3.1-1+e2	2,551
zlibapk	1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more	1.3.2.1_rc20260601-r0	95
rsyncdeb	3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 more	no fix listed	30
klibcdeb	2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3	no fix listed	7
zlibrpm	1.3.1-1.azl3	no fix listed	1

OSV records: CGA-64hx-6x96-r8f7 CGA-6ph6-75jp-484p DEBIAN-CVE-2026-85091 UBUNTU-CVE-2026-85091 AZL-99090 ECHO-2e36-531c-37dd
Also known as: CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,651 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed

Open the chart page →

7,964

Container images carrying it

2,647 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :6.0.12	646902910d6a	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mongo :4.2	699d652ed674	zlib@1:1.2.11.dfsg-0ubuntu2.2	no fix listed	1
library/mongo :4.2.1	6ca49afbcb2b	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
library/mongo :noble	6ede2806c78e	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mongo :6.0.2	71a63fc2438e	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/mongo :5.0.21	7c81758cb295	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/mongo :8.3.9	81a1c8842a09	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed	1
library/mongo :7.0-jammy	84c4a18b60a0	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mongo :7.0.28-jammy	88785f6f665a	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mongo :4.2.21-bionic	9cb28f7291d9	zlib@1:1.2.11.dfsg-0ubuntu2.1	no fix listed	1
library/mongo :7.0.12	ae1cf99fa7bf	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/mongo :4.4.18	d23ec07162ca	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/mongo :8.0.11	dca8d11fe467	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/mysql :8.0-debian	9382e4f6f7f0	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/neo4j :2026.02.2	5ab4ab0358cf	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/neo4j :2026.05.0	6c162e2432f8	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nextcloud :35.0.0 :35.0.0-apache	3e9f6eaa5dc8	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nextcloud :31.0.6-apache	588609d76b21	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/nextcloud :34.0.4-apache	b13a87affb7e	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nginx :1.27.4	09369da6b103	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/nginx :1.29	1881968aff6f	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nginx :1.27	6784fb0834aa	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/nginx :1.31	a53fc6c27208	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nginx :latest	cfb8a89ac237	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/node :22-bookworm-slim	83f487e0a634	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/node :20	8f693eaa7e0a	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/node :latest	f5d1cc40abc1	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/phpmyadmin :5.2.3-apache	adc486045303	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :18.0	073e7c8b84e2	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :17.4	304ab8135187	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :16.11	468e1f126ca5	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :16.6	557fea37a744	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/postgres :18.3	69e8582b781c	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :15.18	6eb0add3b77c	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :15.3	8775adb39f0d	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/postgres :18.4	8ff36f3c6637	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :18.3	a9abf4275f9e	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :17.5	aadf2c0696f5	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :13.12	ced3ba927f4c	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/postgres :14.22	eba8ddbdd837	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/postgres :17.10	ebba4f4de37f	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1