Critical CVE-2026-22184 on Stable 25.8.14 and Antalya 25.8

[CarlosFelipeOR]

Description

A new critical severity vulnerability was detected during CI runs.

• CVE ID: CVE-2026-22184
• Severity: Critical
• Detected in: CI

This CVE was observed in PR #1305 on 25.8.14 Stable and in PR #1311 on Antalya 25.8.14.
This is a newly observed failure and has not been investigated yet.

---

Affected Versions

The CVE has been observed in the following versions:

• 25.8.14 Stable
  CI report: https://s3.amazonaws.com/altinity-build-artifacts/PRs/1305/b8d517b247ec12b55c494c6205de1914389e7df5/21033620249/ci_run_report.html#docker-images-cves

• Antalya 25.8
  CI report: https://s3.amazonaws.com/altinity-build-artifacts/PRs/1311/4baf17c1964889a5e5e3f35bb22a6b0e78465656/21034604283/ci_run_report.html#docker-images-cves

---

CVE Details

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-22184

[zvonand]

madler/zlib#1142 (comment)

[zvonand]

It is no longer critical