StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,608
of 17,803 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,608 of 17,803 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,517
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r094
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 39 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,608 by stars
ChartLatestAffected imagesRadar Score
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,552
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

96,390
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

9,065
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

27,056
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
rsync@3.1.3-8ubuntu0.3
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
no fix listed

Open the chart page →

12,054
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed

Open the chart page →

18,101
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,758
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

570
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

4,021
redisgengxiankun-charts0.2.01 of 1See more

redis gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,004
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed

Open the chart page →

4,970
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,715
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
library/kibana:7.17.150172f1c538e7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

34,935
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

16,880
ghostghostVerified publisher0.1.02 of 4See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/ghost:5.79.083f7bf209844
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

9,136
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,022
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,101
rabbitmqginger-society0.1.01 of 2See more

rabbitmq ginger-society 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/rabbitmq:4-managementffd1b50c522a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,529
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
istio/pilot:1.2.9c09319753454
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
istio/proxyv2:1.2.90c78be035e98
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed

Open the chart page →

193,711
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

12,422
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,317
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
nouchka/sqlite3:latestd183308f201c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,682
glpiglpi-chart0.1.13 of 3See more

glpi glpi-chart 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/phpmyadmin:latest3a8a8d6b5289
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

12,444
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,832
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,686
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

22,704
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

24,493
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
library/cassandra:3.11.65aa8400b4b3b
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

19,370
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

6,092
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,684
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

49,771
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

1,573
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

15,853
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

3,403
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed

Open the chart page →

78,760
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

4,693
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
library/mongo:85211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

5,389
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,247
routergroundcover1.12.3755 of 7See more

router groundcover 1.12.375

5 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
public.ecr.aws/groundcovercom/kong:3.9.3-mini-20260804-107dfd0693fc4
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
zlib@1:1.3.dfsg+really1.3.1-1+b1
1:1.3.dfsg+really1.3.1-1+e2
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
zlib@1:1.3.dfsg+really1.3.1-1+b1
1:1.3.dfsg+really1.3.1-1+e2
quay.io/groundcover/tools:20260719b705e0cbe171
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2

Open the chart page →

6,154
temporalgroundcover1.12.3752 of 2See more

temporal groundcover 1.12.375

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2

Open the chart page →

2,164
gtmgtmVerified publisher1.0.21 of 1See more

gtm gtm 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

500
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
fluent/fluent-bit:latestd792375ca8e5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

6,513
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,327
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,742
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

9,541
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,726
hatchet-hahatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
zlib@1:1.2.13.dfsg-1
no fix listed
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,649
hatchet-stackhatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
zlib@1:1.2.13.dfsg-1
no fix listed
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,649

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.13f6ab3c93e4e
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/nmshd/backbone-admin-ui:7.2.169c9f075d2d9
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
ghcr.io/nmshd/backbone-consumer-api:7.2.1b8f0ce01d057
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
ghcr.io/nmshd/backbone-database-migrator:7.2.12c0c5e022714
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
ghcr.io/nmshd/backbone-event-handler:7.2.1f4d6a2006530
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
ghcr.io/nmshd/backbone-housekeeper:7.2.11c1dfe35447f
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.1da69941fa6b8
zlib@1:1.3.dfsg+really1.3.1-1+dhi2
no fix listed
1
ghcr.io/nmshd/connector:7.4.122f1c515eafa9
zlib@1:1.3.dfsg+really1.3.1-1+dhi3
no fix listed
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.