StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
651
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2482
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

651 by stars
ChartLatestAffected imagesRadar Score
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

2,316
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

49,025
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

6,491
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

24,995
hellohello-helm-world0.1.01 of 1See more

hello hello-helm-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hngtech11/hello-world:v1f0112dc12cfb
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

652
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,839
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,008
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

4,647
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,293
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,800
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,434
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

1,453
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

9,122
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

25,017
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,973
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

10,839
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,384
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

725
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

2,058
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,959
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,105
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

1,476
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,571
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,254
plausible-analyticsimioVerified publisher0.4.22 of 5See more

plausible-analytics imio 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,418
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,192
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,775
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,493
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,062
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,868
jenainseefrlab3.1.01 of 1See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
stain/jena-fuseki:latestb1d0c96f19ad
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

1,262
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

17,852
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,457
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

45,239
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

5,713
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,780
13ftjeffrescVerified publisher0.2.01 of 1See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

888
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,489
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

3,999
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,568
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
xz-utils@5.4.1-0.2
5.4.1-1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,600
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,611
bitcoin-stackk8s-chartsVerified publisher1.0.11 of 1See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
blockstream/bitcoind:27.29472492530e3
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,419
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,105
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,354

Container images carrying it

726 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
xz@5.4.3-r0
5.4.3-r1
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
xz@5.4.3-r1
5.8.1-r0
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
xz@5.6.2-r0
5.6.2-r1
1
ghcr.io/zazuko/blueprint:v0.1.092ac2f97978e
xz@5.4.5-r0
5.4.5-r1
1
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
xz@5.6.1-r3
5.6.2-r1
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.