StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
654
of 17,781 indexed, latest versions
Container images
729
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 654 of 17,781 indexed charts deploy, on 729 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2485
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

654 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,661
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

448
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

1,589
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

570

Container images carrying it

729 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
airbyte/pod-sweeper:1.5.198d2c39d512e
xz-utils@5.4.1-0.2
5.4.1-1
1
akaunting/akaunting:3.0.1552811b36ec3a
xz-utils@5.4.1-0.2
5.4.1-1
1
alexvm6/generator:latestfb99ee4f760a
xz@5.4.3-r0
5.4.3-r1
1
alexvm6/pythonalex:latest89a05786879c
xz@5.4.3-r0
5.4.3-r1
1
allegroai/clearml:2.0.0-613713ae38f7daf
xz-utils@5.4.1-0.2
5.4.1-1
1
alpine/k8s:1.27.321b24e6bf801
xz@5.4.3-r0
5.4.3-r1
1
alpine/k8s:1.31.49c4976d47656
xz@5.6.3-r0
5.6.3-r1
1
alpine/k8s:1.30.0bd01dae02676
xz@5.4.5-r0
5.4.5-r1
1
alpine/k8s:1.30.2cd560fce90f7
xz@5.6.1-r3
5.6.2-r1
1
alpine/k8s:1.28.13e5c0b053fed7
xz@5.6.2-r0
5.6.2-r1
1
alpine/k8s:1.32.3eec354133193
xz@5.6.3-r0
5.6.3-r1
1
alpine/k8s:1.28.2fc059f056ad0
xz@5.4.3-r0
5.4.3-r1
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
andreymileshin/kube-info:v0.1.0f7b300bc9e66
xz@5.4.5-r0
5.4.5-r1
1
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
xz@5.4.5-r0
5.4.5-r1
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
xz-utils@5.4.1-0.2
5.4.1-1
1
apache/activemq-artemis:2.37.0bae523439ee3
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
apache/airflow:2.8.4-python3.964e58748b6b9
xz-utils@5.4.1-0.2
5.4.1-1
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
xz-utils@5.4.1-0.2
5.4.1-1
1
apache/airflow:2.8.1e5560ad0b86e
xz-utils@5.4.1-0.2
5.4.1-1
1
apache/rocketmq:5.3.0434d8398f996
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
apache/superset:4.0.1ab9467fd712c
xz-utils@5.4.1-0.2
5.4.1-1
1
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
xz@5.4.3-r0
5.4.3-r1
1
aristidetm/basic-notebook:3.6.5469dbc951224
xz-utils@5.4.1-0.2
5.4.1-1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
xz-utils@5.4.1-0.2
5.4.1-1
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
xz-utils@5.4.1-0.2
5.4.1-1
1
assistiot/identity-manager_db:latest0d3e6d35f168
xz-utils@5.4.1-0.2
5.4.1-1
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
xz@5.4.3-r0
5.4.3-r1
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
xz@5.4.5-r0
5.4.5-r1
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
xz-utils@5.4.1-0.2
5.4.1-1
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
xz-utils@5.4.1-0.2
5.4.1-1
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
xz-utils@5.4.1-0.2
5.4.1-1
1
assistiot/traffic-classification_api:2.0.0e32b87786142
xz@5.4.5-r0
5.4.5-r1
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
xz-utils@5.4.1-0.2
5.4.1-1
1
avinash263/pyredis263:latestaa2b8727f1a6
xz-utils@5.4.1-0.2
5.4.1-1
1
avzini/web-app:latestf40b30210ed0
xz-utils@5.4.1-0.2
5.4.1-1
1
baserow/backend:1.31.1e0b3c8130b91
xz-utils@5.4.1-0.2
5.4.1-1
1
baserow/baserow:1.30.1df0c42eb67e8
xz-utils@5.4.1-0.2
5.4.1-1
1
behnambm/docker-sample:v1bd3ad88afff9
xz@5.6.1-r3
5.6.2-r1
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/kubectl:1.301249fc292e84
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/kubectl:1.3164614ef8290f
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
xz-utils@5.4.1-0.2
5.4.1-1
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.