StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,562
of 17,787 indexed, latest versions
Container images
2,557
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,562 of 17,787 indexed charts deploy, on 2,557 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+21 more1:1.3.dfsg+really1.3.1-1+e22,468
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+5 more1.3.3-r088
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 15 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,562 by stars
ChartLatestAffected imagesRadar Score
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,757
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

810
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-assure-identity:2.0.0147854a3c916
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-audit:2.0.079428add7f38
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-binary-storage:2.0.053decadc102d
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-deployment:2.0.0ea8110886d38
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-management-api:2.0.0b9a23345eabd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
lumenvox/cloud-voice-verifier:2.0.014170ad34903
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

70,741
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,091
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,734
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,049
magentomagento3.2.33 of 12See more

magento magento 3.2.3

3 of the 12 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
rsync@3.1.3-8ubuntu0.7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
no fix listed
library/rabbitmq:4.1.0-management935b3f84c1e4
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/redis:7.274566c6910d1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,479
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

2,975
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

19,187
mcpmcp-chartsVerified publisher0.0.233 of 7See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

6,929
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,753
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

4,137
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,021
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,680
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,738
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redmine:6.1.204ac44a2595b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,527
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,827
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,827
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,879
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

3,689
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,626
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
zlib@1:1.2.13.dfsg-1
no fix listed
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
zlib@1:1.2.13.dfsg-1
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
zlib@1:1.2.13.dfsg-1
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

37,373
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,827
helm-composenousefreakVerified publisher0.1.32 of 2See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
rsync@3.1.3-8ubuntu0.1
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
no fix listed
library/wordpress:latest5a93c470ae82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

14,250
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,039
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,827
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,838
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
zlib@1:1.2.11.dfsg-2ubuntu9
no fix listed

Open the chart page →

4,166
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,779
opentelemetry-demoopentelemetry-helmVerified publisher0.41.110 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

10 of the 34 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-shipping02602e60edbf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

22,420
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,873
opikopikOfficialVerified publisher2.2.612See more

opik opik 2.2.61

2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
redis/redis-stack-server:7.2.0-v10e44b2b49d059
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

—
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
shaowenchen/ops-server:latest315444f703f4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

8,939
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,681
paperless-ngxpaperlessVerified publisher0.4.03 of 3See more

paperless-ngx paperless 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
valkey/valkey:9.0.54c64dfeae602
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

8,489
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,883
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

4,727
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,035
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
zlib@1:1.2.11.dfsg-2ubuntu9.1
no fix listed

Open the chart page →

7,576
playgroundplayground0.1.11 of 1See more

playground playground 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,827
matomopockostVerified publisher1.3.03 of 3See more

matomo pockost 1.3.0

3 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/redis:8.10.1298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
pockost/matomo:5.13.07f5d293cbe4e
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

5,047
portraitportraitVerified publisher0.2.133 of 8See more

portrait portrait 0.2.13

3 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
treskon/portrait:DEV-latest88e813f22347
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

31,844
postgresqlpostgresql-helm0.1.21 of 1See more

postgresql postgresql-helm 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,626
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,476
privacyideaprivacyidea1.0.62 of 2See more

privacyidea privacyidea 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
zlib@1.3.1-r51
1.3.3-r0
library/mariadb:11.7.2fcc7fcd7114a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

5,440
prowlerprowler-appVerified publisher0.0.92 of 5See more

prowler prowler-app 0.0.9

2 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
prowlercloud/prowler-api:5.31.14f252d579be2
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,158
pyramidanalyticspyramidanalyticsVerified publisher2025.11.2261 of 9See more

pyramidanalytics pyramidanalytics 2025.11.226

1 of the 9 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
pyramidanalytics/gis:2025.11.2264b4c30192175
zlib@1.3.2-r5
1.3.3-r0

Open the chart page →

121
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,201
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

23,964

Container images carrying it

2,557 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
zlib@1:1.2.13.dfsg-1
no fix listed
2
ghcr.io/xeor/karb:1.0.6:main647a3c938d31
zlib@1.3.2-r3
1.3.3-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
quay.io/cilium/cilium-envoy:v1.37.5-1786810558-766ccfb37260a43e9d228837aa84ce3faf9f64e775b8094c7127
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
zlib@1:1.2.13.dfsg-1
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
1password/connect-api:1.8.2e915c0c84397
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
1password/connect-sync:1.8.26297ca6136c0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
zlib@1:1.2.13.dfsg-1
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
zlib@1:1.2.13.dfsg-1
no fix listed
1
acryldata/datahub-actions:v1.7.0.1c5fd70130157
zlib@1.3.2-r5
1.3.3-r0
1
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
zlib@1.3.2-r5
1.3.3-r0
1
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
zlib@1.3.2-r5
1.3.3-r0
1
actualbudget/actual-server:25.3.158fecd9088b7
zlib@1:1.2.13.dfsg-1
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
agentarea/agentarea-api:latest9e15e16fa758
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
zlib@1:1.2.13.dfsg-1
no fix listed
1
agentarea/agentarea-worker:latest1e5cb68ee77a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
aibrix/metadata-service:v0.7.063fb81a64377
zlib@1:1.2.13.dfsg-1
no fix listed
1
airbyte/manifest-server:7.23.73b3a670af168
zlib@1:1.2.13.dfsg-1
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
zlib@1:1.2.13.dfsg-1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
zlib@1:1.2.13.dfsg-1
no fix listed
1
akeyless/base:latest759e4289fae8
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
akeyless/gateway:5.3.13d2e7dce5eb9
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
aktosecurity/data-ingestion-service213aded7adc5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
alazidis/stornx:1.1.1602d4f7f090c
zlib@1:1.2.13.dfsg-1
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
zlib@1:1.2.13.dfsg-1
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
zlib@1:1.2.11.dfsg-0ubuntu2.1
no fix listed
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.