StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,651
of 17,805 indexed, latest versions
Container images
2,647
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,651 of 17,805 indexed charts deploy, on 2,647 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,551
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r095
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed30
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,651 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

7,964

Container images carrying it

2,647 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
robustadev/kubewatch:v2.9.00457a51e36e8
zlib@1.3.1-r4
1.3.2.1_rc20260601-r0
1
rocketadmin/rocketadmin:1.17.710955ef540b9
zlib@1:1.2.13.dfsg-1
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
zlib@1:1.2.13.dfsg-1
no fix listed
1
rotationalio/beacon:0.2.0f8d8b694515a
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
rotationalio/endeavor:1.3.0ac566baddc06
zlib@1:1.2.13.dfsg-1
no fix listed
1
rotationalio/genoa:1.2.03ab583519215
zlib@1:1.2.13.dfsg-1
no fix listed
1
rotationalio/geoping:1.3.034bcb6fc3cb7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
rotationalio/honu:0.5.069fd30c2e31c
zlib@1:1.2.13.dfsg-1
no fix listed
1
rotationalio/rotational-api:1.3.0f1a2d05d8fff
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
rotationalio/vanity:1.2.0d77350f69b45
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
rraahul/test:latestbfe2c1183bc0
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
rrobetti/ojp:0.1.0-beta1141bd88232b
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
rspamd/rspamd:4.1.4e870599c970d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
rstmdb/rstmdb:lateste5187f2aaace
zlib@1:1.2.13.dfsg-1
no fix listed
1
rtuszik/photon-docker:2.4.021549c60f9e6
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
rundeck/rundeck:3.2.74d64fe56f767
zlib@1:1.2.8.dfsg-2ubuntu4.3
no fix listed
1
rundeck/rundeck:3.0.16b13e8059ad72
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
zlib@1:1.2.13.dfsg-1
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ryuunosukeds3/orbital:latest0879f7261b10
zlib@1:1.2.13.dfsg-1
no fix listed
1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3ce9ce8293e4e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9bb64bf14467d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525799c35f9f306
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
zlib@1:1.2.13.dfsg-1
no fix listed
1
santisbon/evworker:lateste807283f8d69
zlib@1:1.2.13.dfsg-1
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
zlib@1:1.2.13.dfsg-1
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
zlib@1:1.2.13.dfsg-1
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
zlib@1:1.2.13.dfsg-1
no fix listed
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
rsync@3.1.2-2.1ubuntu1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
no fix listed
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
zlib@1:1.2.13.dfsg-1
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
seatsurfing/backend:1.119.39952e80048b0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
sebt3/kuberest:1.4.00ccce5d6d4d2
zlib@1:1.2.13.dfsg-1
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
rsync@3.1.1-3ubuntu1.2
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
no fix listed
1
selenium/hub:4.48.0-20260905d47c27474cb4
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.