StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
651
of 17,787 indexed, latest versions
Container images
726
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 651 of 17,787 indexed charts deploy, on 726 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2482
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

651 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

570

Container images carrying it

726 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hiboxsystems/marge-bot:0.14.0dcffb926e563
xz-utils@5.4.1-0.2
5.4.1-1
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
xz-utils@5.4.1-0.2
5.4.1-1
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
xz-utils@5.4.1-0.2
5.4.1-1
1
hngtech11/hello-world:v1f0112dc12cfb
xz@5.4.3-r0
5.4.3-r1
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
xz@5.4.3-r0
5.4.3-r1
1
homeassistant/home-assistant:2023.12.48d000332b09b
xz@5.4.3-r0
5.4.3-r1
1
i4trust/activation-service:2.2.09f3719176893
xz@5.4.3-r0
5.4.3-r1
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
xz-utils@5.4.1-0.2
5.4.1-1
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
xz-utils@5.4.1-0.2
5.4.1-1
1
indevlab/ejabberd:24.12-k8s8bc689d093a7
xz@5.4.5-r0
5.4.5-r1
1
intelloop/atlas-cmms-frontend:v1.5.12409c2a00ab6
xz@5.4.5-r0
5.4.5-r1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
xz-utils@5.4.1-0.2
5.4.1-1
1
invoiceninja/invoiceninja:5.6.241437916dee01
xz@5.4.3-r0
5.4.3-r1
1
iomesh/node-disk-manager:1.8.0-2292ad270082e
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
1
istio/examples-helloworld-v1:latest328b237e4fb1
xz-utils@5.4.1-0.2
5.4.1-1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
xz-utils@5.4.1-0.2
5.4.1-1
1
istio/install-cni:1.23.6ab34c4740f44
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
istio/pilot:1.23.69c3d6a218181
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
istio/ztunnel:1.25.005f3972d80a9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
xz-utils@5.4.1-0.2
5.4.1-1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
xz-utils@5.4.1-0.2
5.4.1-1
1
jellyfin/jellyfin:10.10.77ae36aab93ef
xz-utils@5.4.1-0.2
5.4.1-1
1
jellyfin/jellyfin:10.10.696b09723b22f
xz-utils@5.4.1-0.2
5.4.1-1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
xz-utils@5.4.1-0.2
5.4.1-1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
xz-utils@5.4.1-0.2
5.4.1-1
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
xz-utils@5.4.1-0.2
5.4.1-1
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
xz-utils@5.4.1-0.2
5.4.1-1
1
jlesage/firefox:v25.03.1055c28defe31
xz@5.6.3-r0
5.6.3-r1
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
xz-utils@5.4.1-0.2
5.4.1-1
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
xz@5.6.3-r0
5.6.3-r1
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
xz@5.4.3-r0
5.4.3-r1
1
kfirfer/slackgpt:0.0.15461331bd838e
xz@5.4.3-r0
5.4.3-r1
1
kinseii/wazuh-agent:4.14.17160eb143728
xz-utils@5.4.1-0.2
5.4.1-1
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
xz@5.6.2-r0
5.6.2-r1
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
xz@5.4.5-r0
5.4.5-r1
1
knspar/phronetis:0.1.4609499d2dc91a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
1
knspar/phronetis-operator:0.1.60c4f0543ee58
xz-utils@5.4.1-0.2
5.4.1-1
1
kserve/models-web-app:v0.13.073486345a602
xz-utils@5.4.1-0.2
5.4.1-1
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
xz-utils@5.4.1-0.2
5.4.1-1
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
xz-utils@5.4.1-0.2
5.4.1-1
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
xz-utils@5.4.1-0.2
5.4.1-1
1
kubeshop/testkube-dashboard:1.16.748958b4126a4
xz@5.4.3-r0
5.4.3-r1
1
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
xz@5.4.3-r0
5.4.3-r1
1
langgenius/dify-api:1.0.0066035f93856
xz-utils@5.4.1-0.2
5.4.1-1
1
langgenius/dify-api:0.6.11fca918260dd6
xz-utils@5.4.1-0.2
5.4.1-1
1
leantime/leantime:3.3.3ad4bfb0699d3
xz@5.6.2-r0
5.6.2-r1
1
lib42/jackett:latesta55596cda383
xz-utils@5.4.1-0.2
5.4.1-1
1
library/couchdb:3.4.22817ad50b5c5
xz-utils@5.4.1-0.2
5.4.1-1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.