StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
657
of 17,787 indexed, latest versions
Container images
732
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 657 of 17,787 indexed charts deploy, on 732 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2487
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more243
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

657 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

7,685
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
xz-utils@5.4.1-0.2
5.4.1-1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
xz@5.6.2-r0
5.6.2-r1
hamzaarshad10/querypodpy:1.7154f38e8668e
xz-utils@5.4.1-0.2
5.4.1-1
murtazashah46/helmfile:latest4d11726cf803
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

13,197
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,136
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,674
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

448
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

569

Container images carrying it

732 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
valkey/valkey:8.0.1c5d4f082b76d
xz-utils@5.4.1-0.2
5.4.1-1
1
venturenox/redis:latest83b471c193ba
xz-utils@5.4.1-0.2
5.4.1-1
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
xz-utils@5.4.1-0.2
5.4.1-1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
xz-utils@5.4.1-0.2
5.4.1-1
1
vlebediantsev/notes-project-front:latest945675fd2636
xz-utils@5.4.1-0.2
5.4.1-1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
xz-utils@5.4.1-0.2
5.4.1-1
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
xz@5.4.3-r0
5.4.3-r1
1
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
xz-utils@5.4.1-0.2
5.4.1-1
1
wmbusmeters/wmbusmeters:release-1.18.0d82715d9ae22
xz@5.6.2-r0
5.6.2-r1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
xz-utils@5.4.1-0.2
5.4.1-1
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
xz-utils@5.4.1-0.2
5.4.1-1
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
xz@5.6.3-r0
5.6.3-r1
1
youkadev/api-snap:0.1.14db0f9428e67
xz-utils@5.4.1-0.2
5.4.1-1
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
xz@5.4.3-r0
5.4.3-r1
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
xz@5.4.3-r0
5.4.3-r1
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
xz-utils@5.4.1-0.2
5.4.1-1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
xz-utils@5.4.1-0.2
5.4.1-1
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/caninehq/canine:latesta058034ca006
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/cubeengine/sponge:1.20.2-11.0.0-RC13755c85f2b82064
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/data-fair/processings:15a9216989707
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
xz@5.6.1-r3
5.6.2-r1
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.