StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,595
of 17,781 indexed, latest versions
Container images
2,596
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,595 of 17,781 indexed charts deploy, on 2,596 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,502
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+5 more1.3.2-r6, 1.3.3-r093
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 15 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,595 by stars
ChartLatestAffected imagesRadar Score
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.44 of 7See more

oneuptime oneuptime 13.0.4

4 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.701b81d1432c4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
oneuptime/probe:release6b2d98713711
zlib@1:1.2.13.dfsg-1
no fix listed
oneuptime/runner:release4accc516d800
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

11,192
openclawopenclaw-helmVerified publisher1.5.402 of 2See more

openclaw openclaw-helm 1.5.40

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,660
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed

Open the chart page →

3,382
stalwart-mailstalwart-mailVerified publisher2.0.101 of 1See more

stalwart-mail stalwart-mail 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,403
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
rsync@3.1.2-2.1ubuntu1.1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
no fix listed

Open the chart page →

15,592
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

7,880
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,226
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

11,933
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,352
milvusmilvus-helm5.0.272 of 4See more

milvus milvus-helm 5.0.27

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
milvusdb/etcd:3.5.25-r1fededb2f2d63
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

10,670
prefect-serverprefectVerified publisher2026.9.32126052 of 2See more

prefect-server prefect 2026.9.3212605

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
zlib@1:1.2.13.dfsg-1
no fix listed
prefecthq/prefect:3.8.5-python3.110018d02259bc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

5,786
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

6,328
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

18,509
bitbucketatlassian-data-centerVerified publisher2.0.151 of 1See more

bitbucket atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.705933f2b1cfd
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed

Open the chart page →

1,444
zookeepercloudpirates-zookeeperVerified publisher0.13.111 of 1See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5cab8944a33a1
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

2,924
codefreshcodefresh-onpremOfficialVerified publisher2.12.134 of 42See more

codefresh codefresh-onprem 2.12.13

4 of the 42 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/rabbitmq:4.1.39e635efba431
zlib@1:1.2.13.dfsg-1
no fix listed
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,956
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.38.4447f857a0146
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

1,482
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,806
redisgroundhog2k2.4.71 of 1See more

redis groundhog2k 2.4.7

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

955
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,685
memcachedkubelauncherVerified publisher0.1.321 of 1See more

memcached kubelauncher 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinnedb599ca6b3ff3
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

596
mysqlkubelauncherVerified publisher0.4.41 of 1See more

mysql kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnede9609bd50416
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

938
postgresqlkubelauncherVerified publisher0.4.31 of 1See more

postgresql kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned1a27e11e5925
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,115
memgraphmemgraphVerified publisher1.0.61 of 2See more

memgraph memgraph 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.0a1dc375774ed
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,373
velero-uiotwldVerified publisher0.15.01 of 1See more

velero-ui otwld 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
otwld/velero-ui:0.10.2d1954b759e47
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,332
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
rsync@3.1.3-8ubuntu0.7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
no fix listed
stackstorm/st2api:3.86f56d239d280
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2auth:3.833ecfda16608
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2notifier:3.8f190a6212195
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2web:3.809989a26c8b7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.06 of 14See more

supabase tokens-studio 1.0.0

6 of the 14 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/kong:3.8.0712e407b20ea
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
supabase/edge-runtime:v1.59.0eff9c554d649
zlib@1:1.2.13.dfsg-1
no fix listed
supabase/postgres-meta:v0.84.2d0a96973e9f1
zlib@1:1.2.13.dfsg-1
no fix listed
supabase/realtime:v2.33.8d207e6e23ad3
zlib@1:1.2.13.dfsg-1
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

23,123
wekanwekanVerified publisher11.76.02 of 3See more

wekan wekan 11.76.0

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/wekan/ferretdb:latest6cb94aa01999
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/wekan/wekan:v11.764a9601847dfd
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,576
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,493
cloudbeaveravistoVerified publisher1.1.71 of 1See more

cloudbeaver avisto 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:26.1.287ab86d00f8c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,710
budibasebudibase0.0.0-master3 of 7See more

budibase budibase 0.0.0-master

3 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
zlib@1:1.2.13.dfsg-1
no fix listed
budibase/proxy:3.41.38d780b6ee602
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

10,775
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.21 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
zlib@1.3.1-1.azl3
no fix listed

Open the chart page →

2,235
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,812
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
zlib@1:1.2.11.dfsg-2ubuntu9.1
no fix listed

Open the chart page →

3,454
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cubejs/cubestore:v1.5.334ac523a9bab
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,025
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

7,857
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,442
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

767
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,360
keycloakkubelauncherVerified publisher0.4.41 of 1See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/keycloakdigest-pinnedafe3bd73d7cf
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,251
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,216
mariadbkubelauncherVerified publisher0.5.71 of 1See more

mariadb kubelauncher 0.5.7

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mariadbdigest-pinnede25056a6ec52
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,057
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,342
openldapkubelauncherVerified publisher0.2.01 of 1See more

openldap kubelauncher 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/openldapdigest-pinned8978aa002bc0
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,240
rabbitmqkubelauncherVerified publisher0.2.111 of 1See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinnedff5a36a457f1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,079
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

770
zookeeperkubelauncherVerified publisher0.2.111 of 1See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned7826e9caa461
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

989
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

3,074
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed

Open the chart page →

2,977

Container images carrying it

2,596 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
3
vaultwarden/server:1.37.1ebdfe70701c6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
3
xenondb/percona:5.7.330e26872a2b67
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
zlib@1:1.2.13.dfsg-1
no fix listed
3
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
zlib@1:1.2.13.dfsg-1
no fix listed
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
zlib@1:1.2.13.dfsg-1
no fix listed
3
ghcr.io/quenchworks/images/mariadb7f506d403668
zlib@1.3.2-r4
1.3.3-r0
3
ghcr.io/quenchworks/images/mysql65ea66e8db48
zlib@1.3.2-r4
1.3.3-r0
3
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
zlib@1:1.2.13.dfsg-1
no fix listed
3
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.12d7747f308042
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/argoproj/argocd:v3.5.2e2aadfae709d
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
3
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
zlib@1:1.2.13.dfsg-1
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
zlib@1:1.2.8.dfsg-2ubuntu4.3
no fix listed
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
zlib@1:1.2.13.dfsg-1
no fix listed
3
actualbudget/actual-server:26.9.0552beab3dec8
zlib@1:1.2.13.dfsg-1
no fix listed
2
alazidis/kube-netlag:1.1.00e8c84152201
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
apache/apisix:3.18.0-ubuntu9ee5df1611f9
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
apache/druid:37.0.00116fb802786
zlib@1:1.2.13.dfsg-1
no fix listed
2
apache/nifi-registry:1.26.07cdfd8deec92
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
2
apache/rocketmq:5.4.0319cd8a81ed1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/etcd:latest99b408c15272
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
zlib@1:1.2.13.dfsg-1
no fix listed
2
bitnami/minideb:latestab4d5b45116e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
blockstack/stacks-core:3.2.0.0.0f79944317326
zlib@1:1.2.13.dfsg-1
no fix listed
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
zlib@1:1.2.13.dfsg-1
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
clickhouse/clickhouse-server:24.2ed9640bfff07
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
2
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
2
cloudflare/cloudflared:2026.6.16d91c121b803
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
cloudflare/cloudflared:2026.9.1b269e8abd07a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.