StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
651
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2482
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

651 by stars
ChartLatestAffected imagesRadar Score
wmbusmetersandrenarchyVerified publisher1.2.01 of 1See more

wmbusmeters andrenarchy 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
wmbusmeters/wmbusmeters:release-1.18.0d82715d9ae22
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

516
ddosifyanteonVerified publisher1.7.54 of 13See more

ddosify anteon 1.7.5

4 of the 13 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
xz-utils@5.4.1-0.2
5.4.1-1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
xz-utils@5.4.1-0.2
5.4.1-1
ddosify/selfhosted_frontend:2.7.456dbd7cf0776
xz@5.4.3-r0
5.4.3-r1
library/nginx:1.25.4-alpine31bad00311cb
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

25,669
deploy-uiappscodeVerified publisher2026.9.111 of 1See more

deploy-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

720
marketplace-uiappscodeVerified publisher2026.9.111 of 1See more

marketplace-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

720
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,657
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
openruntimes/executor:0.11.42228f186dcbb
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

9,847
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

13,352
resource-provisioningassist-iot-resource-provisioning1.0.02 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
xz@5.4.3-r0
5.4.3-r1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
xz-utils@5.4.1-0.2
5.4.1-1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
xz-utils@5.4.1-0.2
5.4.1-1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

45,363
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

1,166
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

32,501
auctioneerastria0.0.21 of 1See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,178
evm-bridge-withdrawerastria1.0.61 of 1See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,154
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,680
graph-nodeastria0.2.21 of 3See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
graphprotocol/graph-node:latestb0436347fb24
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,495
hermesastria0.7.11 of 1See more

hermes astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

1,952
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

9,412
attestkeepattestkeepVerified publisher1.1.01 of 2See more

attestkeep attestkeep 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:16.4-alpine5660c2cbfea5
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

1,588
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,297
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

956
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

1,516
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,297
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

2,727
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,145
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,220
jenkinsbook-k8sinfra-v25.1.122 of 2See more

jenkins book-k8sinfra-v2 5.1.12

2 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
xz-utils@5.4.1-0.2
5.4.1-1
kiwigrid/k8s-sidecar:1.26.2e271016441af
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

8,323
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

6,036
kubevirt-managerbuttahtoastVerified publisher0.1.31 of 1See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

1,497
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,629
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

8,001
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

88,335
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

14,130
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

15,027
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

15,371
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

1,126
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,778
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,042
dnsbl-exporterchristianhuthVerified publisher1.4.01 of 2See more

dnsbl-exporter christianhuth 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

1,459
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,329
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,982
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

11,995
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

18,293
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

8,009
cluster-octopuscluster-octopus1.0.01 of 1See more

cluster-octopus cluster-octopus 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
cgtysylr/cluster-octopus:1.0.0aec0f8a38a77
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

1,038
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

4,578
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/docker:27-dindaa3df78ecf32
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

19,338

Container images carrying it

726 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver:1.9.0cdba39e3f3d0
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/gabe565/mnemonic-ninja:latest1fd90a9e4d04
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
xz@5.6.3-r0
5.6.3-r1
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
xz@5.6.1-r3
5.6.2-r1
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
xz@5.4.5-r0
5.4.5-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.