CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.3; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,651; of 17,805 indexed, latest versions
Container images: 2,647; deployed by those charts
Fix available: 2 of 5; affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,651 of 17,805 indexed charts deploy, on 2,647 images.

Affected package	Affected versions	Fixed in	Images
zlibdeb	1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more	1:1.3.dfsg+really1.3.1-1+e2	2,551
zlibapk	1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more	1.3.2.1_rc20260601-r0	95
rsyncdeb	3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 more	no fix listed	30
klibcdeb	2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3	no fix listed	7
zlibrpm	1.3.1-1.azl3	no fix listed	1

OSV records: CGA-64hx-6x96-r8f7 CGA-6ph6-75jp-484p DEBIAN-CVE-2026-85091 UBUNTU-CVE-2026-85091 AZL-99090 ECHO-2e36-531c-37dd
Also known as: CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,651 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed

Open the chart page →

7,964

Container images carrying it

2,647 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
oneuptime/probe :release	c5ef060a0bf3	zlib@1:1.2.13.dfsg-1	no fix listed	1
oneuptime/runner :release	bc4f82c54680	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
onosproject/onos :2.2.1	44914a8d4b3f	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
onyxdotapp/onyx-backend :latest	473fdffe4e67	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
onyxdotapp/onyx-web-server :latest	30d0adaa0fa0	zlib@1:1.3.dfsg+really1.3.1-1+dhi2	no fix listed	1
oomk8s/ubuntu-init :1.0.0	3adf3d21ad3b	zlib@1:1.2.8.dfsg-2ubuntu4.1	no fix listed	1
opea/asr :1.0	25dd26d9cd09	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/chatqna :1.0	38c51b791efa	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/codegen :1.0	58f91683892d	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/codegen-ui :1.0	2bee4eb66f3e	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/codetrans :1.0	e2436483b73d	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/codetrans-ui :1.0	3ef121f34610	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/docsum :1.0	3eaa91849512	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/docsum-ui :1.0	7f854e9bffaf	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/guardrails-tgi :1.0	262c6048aab8	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/guardrails-tgi :latest	f68bec6a1271	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/speecht5 :1.0	249afad3d268	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/tts :1.0	257ae94709e9	zlib@1:1.2.13.dfsg-1	no fix listed	1
opea/web-retriever-chroma :1.0	fe08165d7770	zlib@1:1.2.13.dfsg-1	no fix listed	1
openaev/platform :3.260904.0	0a12ce8b3db9	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
openbas/caldera-server :5.1.0	a277796d9724	zlib@1:1.2.13.dfsg-1	no fix listed	1
openbas/platform :2.0.5	d986d80b0a75	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	zlib@1:1.2.13.dfsg-1	no fix listed	1
opencsghq/csgbot :v0.6.9-ee	7d0271e26521	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
opencsghq/csghub-portal :v2.5.0-ee	1cb36b49151e	zlib@1:1.2.13.dfsg-1	no fix listed	1
opencsghq/csghub-server :v2.5.0-ee	587046575c2c	zlib@1:1.2.13.dfsg-1	no fix listed	1
opencsghq/csghub-xnet :v2.5.0-ee	86ea22f495c7	zlib@1:1.2.13.dfsg-1	no fix listed	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	zlib@1:1.2.13.dfsg-1	no fix listed	1
opencsghq/gitlab-shell :v19.2.5	80a65ac370da	zlib@1:1.2.13.dfsg-1	no fix listed	1
opendatacube/explorer :latest	120457ffcd69	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
opendatacube/restcube :latest	91870111837c	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	zlib@1:1.2.11.dfsg-0ubuntu2	no fix listed	1
opendatacube/wps :latest	80df355a660b	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed	1
openebs/rawfile-localpv :v0.15.3	96fd7987ea79	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
openelevation/open-elevation :latest	82fb21612e86	zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed	1
openhab/openhab :5.2.1	bfd4a60e90da	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
openkm/openkm-ce :6.3.11	3bc465a7461b	zlib@1:1.2.11.dfsg-2ubuntu1.3	no fix listed	1
openmined/syft-backend :0.9.5	b72f74a68b32	zlib@1.3.1-r5	1.3.2.1_rc20260601-r0	1
openmined/syft-frontend :0.9.5	d11524a3854a	zlib@1.3.1-r5	1.3.2.1_rc20260601-r0	1
opennode/waldur-mastermind :8.1.2	4c82b15d9042	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	zlib@1:1.2.13.dfsg-1	no fix listed	1
openproject/openproject :17.8.0-slim	48952034215d	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed	1
openthread/border-router :v2026.09.0	7616b9d514de	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1
openthread/otbr :latest	f307f59f6432	zlib@1:1.2.11.dfsg-0ubuntu2.2	no fix listed	1
openvino/model_server :2025.2.1	1e7cd1d70cc1	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed	1