StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
651
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2482
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

651 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

570

Container images carrying it

726 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:8.13561c1f8f99f2
xz@5.6.2-r0
5.6.2-r1
1
dragonflyoss/client:v0.1.82edf3e921f4e0
xz-utils@5.4.1-0.2
5.4.1-1
1
drorivry4/rego:lateste035d49b15ca
xz-utils@5.4.1-0.2
5.4.1-1
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
xz-utils@5.4.1-0.2
5.4.1-1
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
xz@5.6.1-r3
5.6.2-r1
1
emqx/ecp-ui:2.5.1e33e9816f147
xz-utils@5.4.1-0.2
5.4.1-1
1
eqalpha/keydb:alpine_x86_64_v6.3.4f1d60f12cb3c
xz@5.4.3-r0
5.4.3-r1
1
erigontech/erigon:v2.61.288706754b627
xz-utils@5.4.1-0.2
5.4.1-1
1
esphome/esphome:2024.3.09ab8cc88b28c
xz-utils@5.4.1-0.2
5.4.1-1
1
esphome/esphome:2024.12.2b2c6322700ac
xz-utils@5.4.1-0.2
5.4.1-1
1
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1
1
ethersphere/bee:2.2.0a884fd84b72f
xz-utils@5.4.1-0.2
5.4.1-1
1
extrim/perlite:1.5.99cb7eb5598b6
xz@5.6.3-r0
5.6.3-r1
1
federid/webhook:0.1.0fbfb7c6510a7
xz-utils@5.4.1-0.2
5.4.1-1
1
felipecs8/app-db-connection-test:v129e06c9c6385
xz-utils@5.4.1-0.2
5.4.1-1
1
firefart/requesttracker:5.0.40d6249906d8c
xz-utils@5.4.1-0.2
5.4.1-1
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
xz-utils@5.4.1-0.2
5.4.1-1
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
xz-utils@5.4.1-0.2
5.4.1-1
1
fydeinc/envoyproxy:1.13.8.29fadb0a491db
xz@5.4.3-r0
5.4.3-r1
1
gchq/accumulo:2.0.1c460bb587d6d
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
genseb/rabbitmq-producer-randomizer:0.0.6cb7599641099
xz@5.4.3-r0
5.4.3-r1
1
getsentry/relay:24.10.0ba7bf9163219
xz-utils@5.4.1-0.2
5.4.1-1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
xz@5.6.2-r0
5.6.2-r1
1
gitea/gitea:1.22.376f516a1a8c2
xz@5.6.2-r0
5.6.2-r1
1
gitea/gitea:1.21.6ac73e0da341f
xz@5.4.3-r0
5.4.3-r1
1
glenndehaan/sunflare-tools:latesta5b3f1dd865d
xz@5.4.3-r0
5.4.3-r1
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
xz-utils@5.4.1-0.2
5.4.1-1
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
xz-utils@5.4.1-0.2
5.4.1-1
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
xz-utils@5.4.1-0.2
5.4.1-1
1
gradiant/open5gs-dbctl:0.10.3332031245fce
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
grafana/agent:v0.44.23364714a2f64
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
grafana/alloy:v1.5.101a63f4e032c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
grafana/alloy:v1.4.306bdcbb51fc2
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
grafana/beyla:1.3.336d07f8d276e
xz-utils@5.4.1-0.2
5.4.1-1
1
graphprotocol/graph-node:latestb0436347fb24
xz-utils@5.4.1-0.2
5.4.1-1
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
xz-utils@5.4.1-0.2
5.4.1-1
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
xz-utils@5.4.1-0.2
5.4.1-1
1
gulacedia/web-dvwa-new:v367b467d961ca
xz-utils@5.4.1-0.2
5.4.1-1
1
hamidyousefi93/saam-test:latestc34f071f6ed0
xz-utils@5.4.1-0.2
5.4.1-1
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
xz-utils@5.4.1-0.2
5.4.1-1
1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
xz@5.6.2-r0
5.6.2-r1
1
hamzaarshad10/querypodpy:1.7154f38e8668e
xz-utils@5.4.1-0.2
5.4.1-1
1
hansehe/locust:1.1.0bc8e45262bc4
xz-utils@5.4.1-0.2
5.4.1-1
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
xz-utils@5.4.1-0.2
5.4.1-1
1
hassroutyyoussef/orderservice:latest2fc3d1617928
xz-utils@5.4.1-0.2
5.4.1-1
1
hassroutyyoussef/userservice:lateste0392e2b4a90
xz-utils@5.4.1-0.2
5.4.1-1
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
xz-utils@5.4.1-0.2
5.4.1-1
1
hazegoodlife/haaze:milksite8d4c63169e14
xz-utils@5.4.1-0.2
5.4.1-1
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
xz-utils@5.4.1-0.2
5.4.1-1
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.