StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,573
of 17,792 indexed, latest versions
Container images
2,562
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,573 of 17,792 indexed charts deploy, on 2,562 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+21 more1:1.3.dfsg+really1.3.1-1+e22,467
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r0, 1.3.3-r094
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,573 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,562 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
cloudflare/cloudflared:2026.6.16d91c121b803
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
datagrok/grok_connect:latestf5876d3aebb8
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
2
emberstack/kubernetes-reflector:10.0.6551dbd5880929
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
eqalpha/keydb:latest6537505c4235
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
2
freikin/dawarich:1.14.511826c67e4b1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
gisaia/arlas-server:28.0.04e693e7b6f37
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
zlib@1:1.2.13.dfsg-1
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
gotson/komga:1.26.36c2a967bbe9a
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
2
gradiant/ueransim:3.2.6015b30d5fa0f
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
2
grafana/alloy:v1.8.17790f6f7fbd8
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
grafana/alloy:v1.12.2f94b1c82957a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
zlib@1:1.2.13.dfsg-1
no fix listed
2
homebridge/homebridge:latest77c685a40911
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
2
honestica/kube-iptables-tailer:master-91a393242fb939
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
2
hookiesolutions/webhookie:latest0629694246ba
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
2
ilum/api:6.7.3624fd09528c8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
ilum/marquez:0.54.06e1d709d41f8
zlib@1:1.2.13.dfsg-1
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
interlayhq/interbtc:latesta66d0e35e70f
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
iomesh/node-disk-exporter:1.8.0f03148764f38
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
2
istio/kubectl:1.5.10dbb7726d1bf0
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
2
istio/proxyv2:1.18.0757d28c24100
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
2
istio/proxyv2:1.10.3a78b7a165744
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
zlib@1:1.2.13.dfsg-1
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
jhaals/yopass:14.9.0934e4f2c016f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.