CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.3; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,651; of 17,805 indexed, latest versions
Container images: 2,647; deployed by those charts
Fix available: 2 of 5; affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,651 of 17,805 indexed charts deploy, on 2,647 images.

Affected package	Affected versions	Fixed in	Images
zlibdeb	1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more	1:1.3.dfsg+really1.3.1-1+e2	2,551
zlibapk	1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more	1.3.2.1_rc20260601-r0	95
rsyncdeb	3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 more	no fix listed	30
klibcdeb	2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3	no fix listed	7
zlibrpm	1.3.1-1.azl3	no fix listed	1

OSV records: CGA-64hx-6x96-r8f7 CGA-6ph6-75jp-484p DEBIAN-CVE-2026-85091 UBUNTU-CVE-2026-85091 AZL-99090 ECHO-2e36-531c-37dd
Also known as: CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,651 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed

Open the chart page →

7,964

Container images carrying it

2,647 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/postgres :17.5-bookworm	fbcea1bd13b6	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/python :3.10	70c9cc675605	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/python :3.11-slim	9534e5a8e315	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/python :3.8	d41127070014	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/python :3.9	da5aee29682d	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/rabbitmq :3.12.10	0742852455ad	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
library/rabbitmq :4.3.6-management	534e4fefc5f0	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed	1
library/rabbitmq :4.3.6	67bad329974a	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed	1
library/rabbitmq :4.2.8	7561d672fae4	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/rabbitmq :3.7-management	b6dd45cc35b3	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
library/rabbitmq :4.3.6-management	de62d9901fb7	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed	1
library/rabbitmq :4.3.4-management	eb5295d08332	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/redis :8.6.2	009cc37796fb	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/redis :8.8.0	234c902a2db4	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/redis :7.0.15	352c1fdadc91	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :8.4.0	3906b477e4b6	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :8.8.1-trixie	3eafabb4c93f	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/redis :8.2.2	4521b581dbdd	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :8.6.3	4d25e2fe601f	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/redis :8.2.1	5fa2edb1e408	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis	83edc2b8e9ff	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :8.4	8df317692c59	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/redis :8.0.2	b43d2dcbbdb1	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :7.4.1	bb142a9c18ac	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :8.0.3	be0a135f1955	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :6.2	d2ad7b21cafa	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redis :8.2.3	d31852005202	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/redmine :6.1.2	04ac44a2595b	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/telegraf :1.27	507a3eecf809	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/tomcat :11.0.25-jdk17-temurin-noble	9e1d2afa6898	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/ubuntu :bionic	152dc042452c	zlib@1:1.2.11.dfsg-0ubuntu2.2	no fix listed	1
library/ubuntu :22.04	2edbbc5dc405	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/varnish :7.5.0	4d0bb287d87b	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/wordpress :6.4.3-apache	8ae66efb09a2	zlib@1:1.2.13.dfsg-1	no fix listed	1
library/wordpress :6.9.4-fpm	ad4a8bae2eb4	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/wordpress :php8.1-apache	f73396626d2f	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
library/xwiki :lts-postgres-tomcat	56490ac14a31	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
library/zookeeper :3.8-temurin	55d1e5b2e601	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/zookeeper :3.9.5	7d0f24ebb67b	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
library/zookeeper :3.9.4	dfa9ba46d14b	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	zlib@1:1.2.13.dfsg-1	no fix listed	1
lightbend/curl :7.47.0	b0c9894ac8dd	zlib@1:1.2.8.dfsg-2ubuntu4.1	no fix listed	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
linuxserver/calibre-web :0.6.24	241009026e6f	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed	1
linuxserver/code-server :4.10.1	a5e43a05ae79	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
linuxserver/codimd :latest	b801bbcf6386	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1