StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,565
of 17,813 indexed, latest versions
Container images
2,585
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,565 of 17,813 indexed charts deploy, on 2,585 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,506
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r078
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed30
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh

Charts affected

2,565 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,585 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/openrelik/openrelik-server:latestce1132261523
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-shipping7130dba0e77e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-mcp81db69cdd0b6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-flagd-ui97a3d37e709f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-accountingbfd9d13ac58a
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-agentd0f4ae0b32a8
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-addfd7a4697116
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-frontend-proxyfd4da88bfeaa
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-webui/terminals:latest5d2fd44366a4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.