StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,654
of 17,813 indexed, latest versions
Container images
2,678
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,654 of 17,813 indexed charts deploy, on 2,678 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,599
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r078
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed30
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3, 2.0.13-4ubuntu0.2no fix listed8
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,654 by stars
ChartLatestAffected imagesRadar Score
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

12,121
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

3,313
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,027
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e13 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

16,609
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb3 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

16,642
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f83 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,859
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091143 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

16,642
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4693 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,404
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3413 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,404
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b23 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

3 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

16,260
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef2 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

2 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
zlib@1:1.2.13.dfsg-1
no fix listed
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

15,856
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,299
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,853
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

51,218
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed

Open the chart page →

66,239
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm0637954999d0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,832
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

2,333
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,536
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,620
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

20,285
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ncsa/checks:main0b738bbc8d70
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

69,984
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,549
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

20,474
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,002
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

2,043
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,122
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

2,100
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

6,609
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

2,039
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,054
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

3,249
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,512
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,450
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,061
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,362
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
zlib@1:1.2.11.dfsg-0ubuntu2.1
no fix listed

Open the chart page →

14,628
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

13,949
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

13,673
steadybit-agentsteadybit3.1.1693 of 6See more

steadybit-agent steadybit 3.1.169

3 of the 6 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,837
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

20,285
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,532
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,956
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

66,879
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,201
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

12,811
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

12,811
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,585
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

2,626
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,071
substra-backendsubstraVerified publisher26.15.32 of 7See more

substra-backend substra 26.15.3

2 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/substra/substra-backend:1.0.121967f54ec86
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

4,874

Container images carrying it

2,678 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
zlib@1:1.2.13.dfsg-1
no fix listed
1
zer0tonin/mikochi:1.11.009872bae1554
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
gcr.io/datadoghq/observability-pipelines-worker:2.21.1de6ff0f1a854
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
zlib@1.3.1-r6
1.3.2.1_rc20260601-r0
1
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
zlib@1.3.1-r5
1.3.2.1_rc20260601-r0
1
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
zlib@1.3.1-r4
1.3.2.1_rc20260601-r0
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
zlib@1:1.2.13.dfsg-1
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
zlib@1:1.2.13.dfsg-1
no fix listed
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
zlib@1:1.2.13.dfsg-1
no fix listed
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
1
ghcr.io/abcdesktopio/mongo:safe8.0c4c1938a973b
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/aeharding/voyager:latest779759172676
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/aklivity/zilla:2.4.3e33d59dbb606
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.100708ba6617f33c9
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.