StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
657
of 17,787 indexed, latest versions
Container images
732
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 657 of 17,787 indexed charts deploy, on 732 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2487
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more243
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

657 by stars
ChartLatestAffected imagesRadar Score
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
goccx/go-file-server-ui:latest784b35910d52
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

2,215
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,677
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

2,316
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

47,117
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

7,935
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

2,589
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

6,450
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

23,472
hellohello-helm-world0.1.01 of 1See more

hello hello-helm-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hngtech11/hello-world:v1f0112dc12cfb
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

652
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,851
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,014
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

4,646
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,700
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,660
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,349
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

1,453
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

8,618
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

11,441
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

25,099
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,114
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

10,918
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

14,629
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

725
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

2,057
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,770
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

11,975
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

1,476
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,586
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,282
plausible-analyticsimioVerified publisher0.4.22 of 5See more

plausible-analytics imio 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,152
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,205
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,316
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,183
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,069
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,784
jenainseefrlab3.1.01 of 1See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
stain/jena-fuseki:latestb1d0c96f19ad
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

1,262
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,558
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,497
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

45,392
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

5,716
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,816
13ftjeffrescVerified publisher0.2.01 of 1See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

887
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,097
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

4,038
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,648
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,629
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

22,665
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
xz-utils@5.4.1-0.2
5.4.1-1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

59,560
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,626
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,622

Container images carrying it

732 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
xz-utils@5.4.1-0.2
5.4.1-1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
xz-utils@5.4.1-0.2
5.4.1-1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
xz-utils@5.4.1-0.2
5.4.1-1
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
xz-utils@5.4.1-0.2
5.4.1-1
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
xz@5.4.5-r0
5.4.5-r1
1
quay.io/frrouting/frr:9.0.2086acb1278fe
xz@5.4.3-r0
5.4.3-r1
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
xz@5.6.3-r0
5.6.3-r1
1
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
xz@5.4.3-r0
5.4.3-r1
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
xz@5.4.5-r0
5.4.5-r1
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
xz@5.6.1-r3
5.6.2-r1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
xz-utils@5.4.1-0.2
5.4.1-1
1
quay.io/yushiwho/sys-stats:e1f9d778c8d08b95c0b
xz@5.4.3-r0
5.4.3-r1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
xz-utils@5.4.1-0.2
5.4.1-1
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
xz-utils@5.4.1-0.2
5.4.1-1
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
xz@5.4.5-r0
5.4.5-r1
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
xz@5.4.3-r0
5.4.3-r1
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
xz@5.6.2-r0
5.6.2-r1
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
xz@5.4.5-r0
5.4.5-r1
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
xz@5.6.3-r0
5.6.3-r1
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
xz-utils@5.4.1-0.2
5.4.1-1
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.