StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,604
of 17,787 indexed, latest versions
Container images
2,607
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,604 of 17,787 indexed charts deploy, on 2,607 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,512
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+5 more1.3.3-r094
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 15 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,604 by stars
ChartLatestAffected imagesRadar Score
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,523
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

24,355
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

8,955
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

26,996
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
rsync@3.1.3-8ubuntu0.3
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
no fix listed

Open the chart page →

11,909
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed

Open the chart page →

17,996
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,724
cloudflare-tunnelgeneral-helm-chartsVerified publisher0.2.01 of 1See more

cloudflare-tunnel general-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

536
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

4,007
redisgengxiankun-charts0.2.01 of 1See more

redis gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

968
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed

Open the chart page →

4,961
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,266
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
library/kibana:7.17.150172f1c538e7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

34,879
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

16,834
ghostghostVerified publisher0.1.02 of 4See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/ghost:5.79.083f7bf209844
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

9,036
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,888
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,064
rabbitmqginger-society0.1.01 of 2See more

rabbitmq ginger-society 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/rabbitmq:4-managementffd1b50c522a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,509
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
istio/pilot:1.2.9c09319753454
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
istio/proxyv2:1.2.90c78be035e98
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed

Open the chart page →

36,145
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

12,072
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,085
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
nouchka/sqlite3:latestd183308f201c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

2,605
glpiglpi-chart0.1.13 of 3See more

glpi glpi-chart 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/phpmyadmin:latest3a8a8d6b5289
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

12,270
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,839
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,677
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,638
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

24,360
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
library/cassandra:3.11.65aa8400b4b3b
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed

Open the chart page →

19,291
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

6,075
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,646
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

47,117
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

1,553
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

15,780
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,839
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

3,357
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed

Open the chart page →

7,935
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

4,604
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
library/mongo:85211c51171f5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

5,339
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,211
routergroundcover1.12.3595 of 7See more

router groundcover 1.12.359

5 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
public.ecr.aws/groundcovercom/kong:3.9.3-mini-20260804-107dfd0693fc4
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
zlib@1:1.3.dfsg+really1.3.1-1+b1
1:1.3.dfsg+really1.3.1-1+e2
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
zlib@1:1.3.dfsg+really1.3.1-1+b1
1:1.3.dfsg+really1.3.1-1+e2
quay.io/groundcover/tools:20260719b705e0cbe171
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2

Open the chart page →

6,038
temporalgroundcover1.12.3592 of 2See more

temporal groundcover 1.12.359

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
zlib@1:1.3.dfsg+really1.3.1-1+e1
1:1.3.dfsg+really1.3.1-1+e2

Open the chart page →

2,001
gtmgtmVerified publisher1.0.21 of 1See more

gtm gtm 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

478
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
fluent/fluent-bit:latestd792375ca8e5
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

6,450
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,290
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,635
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,798
hatchet-apihatchetOfficialVerified publisher0.18.01 of 4See more

hatchet-api hatchet 0.18.0

1 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,678
hatchet-hahatchetOfficialVerified publisher0.18.03 of 8See more

hatchet-ha hatchet 0.18.0

3 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
zlib@1:1.2.13.dfsg-1
no fix listed
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,374
hatchet-stackhatchetOfficialVerified publisher0.18.03 of 8See more

hatchet-stack hatchet 0.18.0

3 of the 8 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
zlib@1:1.2.13.dfsg-1
no fix listed
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

7,374

Container images carrying it

2,607 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
zlib@1:1.2.13.dfsg-1
no fix listed
2
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
2
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
zlib@1:1.2.11.dfsg-2ubuntu9
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
zlib@1:1.2.13.dfsg-1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
zlib@1:1.2.13.dfsg-1
no fix listed
2
ghcr.io/xeor/karb:1.0.6:main647a3c938d31
zlib@1.3.2-r3
1.3.3-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
quay.io/cilium/cilium-envoy:v1.37.5-1786810558-766ccfb37260a43e9d228837aa84ce3faf9f64e775b8094c7127
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
zlib@1:1.2.13.dfsg-1
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
1password/connect-api:1.8.2e915c0c84397
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
1password/connect-sync:1.8.26297ca6136c0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
zlib@1:1.2.13.dfsg-1
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
zlib@1:1.2.13.dfsg-1
no fix listed
1
acryldata/datahub-actions:v1.7.0.1c5fd70130157
zlib@1.3.2-r5
1.3.3-r0
1
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
zlib@1.3.2-r5
1.3.3-r0
1
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
zlib@1.3.2-r5
1.3.3-r0
1
actualbudget/actual-server:25.3.158fecd9088b7
zlib@1:1.2.13.dfsg-1
no fix listed
1
adamzammit/limesurvey:7.1.0f48962e1528c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
agentarea/agentarea-api:latest9e15e16fa758
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
zlib@1:1.2.13.dfsg-1
no fix listed
1
agentarea/agentarea-worker:latest1e5cb68ee77a
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
aibrix/metadata-service:v0.7.063fb81a64377
zlib@1:1.2.13.dfsg-1
no fix listed
1
airbyte/manifest-server:7.23.73b3a670af168
zlib@1:1.2.13.dfsg-1
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
zlib@1:1.2.13.dfsg-1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
zlib@1:1.2.13.dfsg-1
no fix listed
1
akeyless/base:latest759e4289fae8
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
akeyless/gateway:5.3.13d2e7dce5eb9
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed
1
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1
no fix listed
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
aktosecurity/data-ingestion-service213aded7adc5
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.