StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,608
of 17,803 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,608 of 17,803 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,517
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r094
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 39 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,608 by stars
ChartLatestAffected imagesRadar Score
checkoutlabs64io-helm-chartsVerified publisher0.11.01 of 3See more

checkout labs64io-helm-charts 0.11.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,686
payment-gatewaylabs64io-helm-chartsVerified publisher0.10.02 of 2See more

payment-gateway labs64io-helm-charts 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
labs64/payment-gateway:0.0.10c66feefca17
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
library/postgres:184ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,778
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,028
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

5,912
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

35,536
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed

Open the chart page →

4,472
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
zlib@1.3.1-r51
1.3.2.1_rc20260601-r0

Open the chart page →

4,503
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,154
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

8,094
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

6,779
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,278
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,800
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

868
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-assure-identity:2.0.0147854a3c916
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-audit:2.0.079428add7f38
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-binary-storage:2.0.053decadc102d
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-deployment:2.0.0ea8110886d38
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-management-api:2.0.0b9a23345eabd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-voice-verifier:2.0.014170ad34903
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

71,428
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,139
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,613
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,795
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,097
magentomagento3.2.33 of 12See more

magento magento 3.2.3

3 of the 12 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
rsync@3.1.3-8ubuntu0.7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
no fix listed
library/rabbitmq:4.1.0-management935b3f84c1e4
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/redis:7.274566c6910d1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,732
mcp-orchestratormagertronVerified publisher3.8.431 of 7See more

mcp-orchestrator magertron 3.8.43

1 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.8.43d80bc1ff7ed8
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed

Open the chart page →

1,533
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

3,030
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

19,226
mcpmcp-chartsVerified publisher0.0.233 of 7See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

7,095
jellyfinmedia-servarrVerified publisher0.17.11 of 2See more

jellyfin media-servarr 0.17.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,658
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

4,238
mockservermockserverOfficialVerified publisher8.0.01 of 1See more

mockserver mockserver 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-8.0.0b8426e0b3c80
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,065
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,736
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,844
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redmine:6.1.204ac44a2595b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,655
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,926
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

3,743
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,686
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
zlib@1:1.2.13.dfsg-1
no fix listed
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
zlib@1:1.2.13.dfsg-1
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
zlib@1:1.2.13.dfsg-1
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

37,794
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
helm-composenousefreakVerified publisher0.1.32 of 2See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
rsync@3.1.3-8ubuntu0.1
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
no fix listed
library/wordpress:latest5a93c470ae82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

14,424
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,037
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,835
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
zlib@1:1.2.11.dfsg-2ubuntu9
no fix listed

Open the chart page →

4,339
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,898
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.41.210 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

10 of the 34 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-shipping02602e60edbf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

23,436
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,991
opikopikOfficialVerified publisher2.2.682 of 13See more

opik opik 2.2.68

2 of the 13 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
redis/redis-stack-server:7.2.0-v10e44b2b49d059
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

14,882
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
shaowenchen/ops-server:latest315444f703f4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

86,022
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,756
paperless-ngxpaperlessVerified publisher0.4.03 of 3See more

paperless-ngx paperless 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
valkey/valkey:9.0.54c64dfeae602
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

8,644
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,961
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

4,746

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
zlib@1.3.1-1.azl3
no fix listed
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.6_local8b9208c09d76
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/redis47200b041382
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
public.ecr.aws/groundcovercom/kong:3.9.3-mini-20260804-107dfd0693fc4
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
zlib@1:1.3.dfsg+really1.3.1-1+b1
1:1.3.dfsg+really1.3.1-1+e2
1
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
zlib@1:1.3.dfsg+really1.3.1-1+b1
1:1.3.dfsg+really1.3.1-1+e2
1
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
zlib@1:1.2.13.dfsg-1
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
zlib@1:1.2.13.dfsg-1
no fix listed
1
quay.io/aerokube/jumphost:1.0.170fd7c00418d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
quay.io/aerokube/keygen:1.0.1578934444f04
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
zlib@1:1.2.11.dfsg-2ubuntu9
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.40.1daf2e7650d61
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.