StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
657
of 17,787 indexed, latest versions
Container images
732
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 657 of 17,787 indexed charts deploy, on 732 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2487
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more243
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

657 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

7,685
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
xz-utils@5.4.1-0.2
5.4.1-1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
xz@5.6.2-r0
5.6.2-r1
hamzaarshad10/querypodpy:1.7154f38e8668e
xz-utils@5.4.1-0.2
5.4.1-1
murtazashah46/helmfile:latest4d11726cf803
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

13,197
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,136
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,674
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

448
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

569

Container images carrying it

732 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
xz@5.6.2-r0
5.6.2-r1
1
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
xz@5.6.2-r0
5.6.2-r1
1
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
xz@5.6.2-r0
5.6.2-r1
1
pococze/python-hello-elos:2.0.07a1aab425e51
xz-utils@5.4.1-0.2
5.4.1-1
1
postgis/postgis:15-3.3-alpine4738bee21eb6
xz@5.4.3-r0
5.4.3-r1
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
xz@5.6.2-r0
5.6.2-r1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
xz-utils@5.4.1-0.2
5.4.1-1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
xz-utils@5.4.1-0.2
5.4.1-1
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
xz@5.4.5-r0
5.4.5-r1
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
xz-utils@5.4.1-0.2
5.4.1-1
1
proxysql/proxysql:2.7.3a4d6c35c2949
xz-utils@5.4.1-0.2
5.4.1-1
1
psono/psono-server:5.0.03b974b43ea03
xz@5.6.2-r0
5.6.2-r1
1
pyaephyohein/mysql2s3bk:alphafdee05f2d441
xz@5.4.3-r0
5.4.3-r1
1
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
xz@5.4.5-r0
5.4.5-r1
1
qdrant/qdrant:v1.7.45f2a56b95266
xz-utils@5.4.1-0.2
5.4.1-1
1
qdrant/qdrant:v1.4.166ee661d5241
xz-utils@5.4.1-0.2
5.4.1-1
1
quickwit/quickwit:v0.8.1d29332bdadcc
xz-utils@5.4.1-0.2
5.4.1-1
1
qxip/qryn:3.2.3977acc9c7a9fd
xz-utils@5.4.1-0.2
5.4.1-1
1
reaper99/recipya:v1.2.27f7ec3aeb88c
xz@5.6.3-r0
5.6.3-r1
1
rnwood/smtp4dev:3.6.1912304153668
xz-utils@5.4.1-0.2
5.4.1-1
1
rocm/k8s-device-plugin:1.31.0.926212c665aab
xz@5.6.3-r0
5.6.3-r1
1
rrobetti/ojp:0.1.0-beta1141bd88232b
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
xz@5.4.3-r0
5.4.3-r1
1
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
xz@5.4.3-r0
5.4.3-r1
1
saidsef/scapy-containerised:v2025.02f17f7c435891
xz@5.6.3-r0
5.6.3-r1
1
santisbon/evwatcher:latestc4e994ca4540
xz-utils@5.4.1-0.2
5.4.1-1
1
santisbon/evworker:lateste807283f8d69
xz-utils@5.4.1-0.2
5.4.1-1
1
santisbon/speedtest:latest8ee3a1697227
xz-utils@5.4.1-0.2
5.4.1-1
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
xz-utils@5.4.1-0.2
5.4.1-1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
xz-utils@5.4.1-0.2
5.4.1-1
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
xz-utils@5.4.1-0.2
5.4.1-1
1
semaphoreui/semaphore:v2.9.645b50bc11833f
xz@5.4.3-r0
5.4.3-r1
1
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
xz@5.4.3-r0
5.4.3-r1
1
shamimkuet/nginx:1.0.2b82902a76a04
xz-utils@5.4.1-0.2
5.4.1-1
1
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
xz-utils@5.4.1-0.2
5.4.1-1
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
xz-utils@5.4.1-0.2
5.4.1-1
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
xz-utils@5.4.1-0.2
5.4.1-1
1
sirrend/helmup-notifications-service:0.1.3997866417011
xz-utils@5.4.1-0.2
5.4.1-1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
xz-utils@5.4.1-0.2
5.4.1-1
1
sky5367/locust-plugins-timescale:latestd3150f201471
xz@5.4.3-r0
5.4.3-r1
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
xz-utils@5.4.1-0.2
5.4.1-1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
xz-utils@5.4.1-0.2
5.4.1-1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
xz-utils@5.4.1-0.2
5.4.1-1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
xz-utils@5.4.1-0.2
5.4.1-1
1
somnathmore/custom-nginx:v2bdfc06cad4ec
xz-utils@5.4.1-0.2
5.4.1-1
1
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
xz-utils@5.4.1-0.2
5.4.1-1
1
sondresjo/garge-app:v1.20.70382ebf9dfc8
xz-utils@5.4.1-0.2
5.4.1-1
1
sondresjo/nstuning-app:v1.6.113a6795bf36da
xz-utils@5.4.1-0.2
5.4.1-1
1
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.