StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
651
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2482
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

651 by stars
ChartLatestAffected imagesRadar Score
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

2,316
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

49,025
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

6,491
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

24,995
hellohello-helm-world0.1.01 of 1See more

hello hello-helm-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hngtech11/hello-world:v1f0112dc12cfb
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

652
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,839
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,008
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

4,647
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,293
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,800
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,434
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

1,453
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

9,122
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

25,017
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,973
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

10,839
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,384
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

725
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

2,058
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,959
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,105
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

1,476
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,571
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,254
plausible-analyticsimioVerified publisher0.4.22 of 5See more

plausible-analytics imio 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,418
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,192
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,775
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,493
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,062
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,868
jenainseefrlab3.1.01 of 1See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
stain/jena-fuseki:latestb1d0c96f19ad
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

1,262
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

17,852
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,457
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

45,239
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

5,713
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,780
13ftjeffrescVerified publisher0.2.01 of 1See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

888
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,489
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

3,999
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,568
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
xz-utils@5.4.1-0.2
5.4.1-1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,600
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,611
bitcoin-stackk8s-chartsVerified publisher1.0.11 of 1See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
blockstream/bitcoind:27.29472492530e3
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,419
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,105
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,354

Container images carrying it

726 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
wallarm/ingress-controller:4.8.0-1a591b9c91570
xz@5.4.3-r0
5.4.3-r1
1
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
xz-utils@5.4.1-0.2
5.4.1-1
1
wmbusmeters/wmbusmeters:release-1.18.0d82715d9ae22
xz@5.6.2-r0
5.6.2-r1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
xz-utils@5.4.1-0.2
5.4.1-1
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
xz-utils@5.4.1-0.2
5.4.1-1
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
xz@5.6.3-r0
5.6.3-r1
1
youkadev/api-snap:0.1.14db0f9428e67
xz-utils@5.4.1-0.2
5.4.1-1
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
xz@5.4.3-r0
5.4.3-r1
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
xz@5.4.3-r0
5.4.3-r1
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
xz-utils@5.4.1-0.2
5.4.1-1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
xz-utils@5.4.1-0.2
5.4.1-1
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/caninehq/canine:latesta058034ca006
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/cubeengine/sponge:1.20.2-11.0.0-RC13755c85f2b82064
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/data-fair/processings:15a9216989707
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
xz@5.6.1-r3
5.6.2-r1
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.