StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
651
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2482
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

651 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.03 of 4See more

airflow airflow-helm 8.9.0

3 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
xz@5.4.5-r0
5.4.5-r1
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

11,367
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

23,894
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,919
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

3,475
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,622
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

7,568
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,800
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,802
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

19,391
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,927
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

11,384
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,293
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,543
litellm-helmlitellm1.101.01See more

litellm-helm litellm 1.101.0

1 container image this version deploys carries CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

—
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

3,382
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

6,041
amd-gpuamd-gpu-helmOfficialVerified publisher0.22.01 of 1See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
rocm/k8s-device-plugin:1.31.0.926212c665aab
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

1,023
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,352
plane-cemakeplaneOfficialVerified publisher1.8.12 of 11See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
xz@5.6.1-r3
5.6.2-r1
library/rabbitmq:3.13.6-management-alpine611107e29cce
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

4,854
prefect-serverprefectVerified publisher2026.9.141419101See more

prefect-server prefect 2026.9.14141910

1 container image this version deploys carries CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

—
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

14,956
supabasetokens-studioVerified publisher1.0.06 of 14See more

supabase tokens-studio 1.0.0

6 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
supabase/edge-runtime:v1.59.0eff9c554d649
xz-utils@5.4.1-0.2
5.4.1-1
supabase/postgres-meta:v0.84.2d0a96973e9f1
xz-utils@5.4.1-0.2
5.4.1-1
supabase/realtime:v2.33.8d207e6e23ad3
xz-utils@5.4.1-0.2
5.4.1-1
supabase/storage-api:v1.12.0f983fb50bd95
xz@5.6.2-r0
5.6.2-r1
supabase/studio:20241021-9f9b08326d8070c55e9
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

8,493
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,480
devtron-operatordevtron0.23.35 of 11See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

32,902
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

5,357
ilumilumOfficialVerified publisher6.7.33 of 19See more

ilum ilum 6.7.3

3 of the 19 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1
gitea/gitea:1.22.376f516a1a8c2
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

23,228
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

3,395
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
xz-utils@5.4.1-0.2
5.4.1-1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

17,245
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.01 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
thingsboard/toolbox:1.13.01bd61a0da6d3
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

3,534
cadvisorckotzbauerVerified publisher2.4.31 of 1See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

961
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,033
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

4,531
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

2,811
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

2,709
nfs-serverobeoneVerified publisher1.1.61See more

nfs-server obeone 1.1.6

1 container image this version deploys carries CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

—
servarrservarr1.0.25 of 10See more

servarr servarr 1.0.2

5 of the 10 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dinutac/jinja2docker:2.1.89340dde8a8a4
xz@5.4.5-r0
5.4.5-r1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
xz@5.4.5-r0
5.4.5-r1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
xz@5.4.5-r0
5.4.5-r1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
xz@5.4.5-r0
5.4.5-r1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

14,238
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,210
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
xz-utils@5.4.1-0.2
5.4.1-1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

14,240
baserowbaserow-chartVerified publisher1.0.563 of 6See more

baserow baserow-chart 1.0.56

3 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

17,263
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

9,106
seafiledatamateVerified publisher0.6.03 of 6See more

seafile datamate 0.6.0

3 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

27,267
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

5,674
plexgabe565Verified publisher0.5.11 of 1See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,539
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,170
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,428
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

96,941
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,779
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

9,261

Container images carrying it

726 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver:1.9.0cdba39e3f3d0
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/gabe565/mnemonic-ninja:latest1fd90a9e4d04
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
xz@5.6.1-r3
5.6.2-r1
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
xz@5.4.5-r0
5.4.5-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.