StackRadar

CVE-2025-31115

High

Advisory

Published 3 Apr 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
654
of 17,781 indexed, latest versions
Container images
729
deployed by those charts
Fix available
3 of 3
affected packages

liblzma5-32bit-5.8.1-1.1 on GA media

Carried by container images the latest versions of 654 of 17,781 indexed charts deploy, on 729 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.4.1-0.2, 5.6.1+really5.4.5-1, 5.6.1+really5.4.5-1build0.15.4.1-1, 5.6.1+really5.4.5-1ubuntu0.2485
xzapk5.4.3-r0, 5.4.3-r1, 5.4.5-r0, 5.6.1-r3+2 more5.4.3-r1, 5.4.5-r1, 5.6.2-r1, 5.6.3-r1+1 more242
xzrpm5.2.3-lp151.4.3.15.8.1-1.12
OSV records
ALPINE-CVE-2025-31115DEBIAN-CVE-2025-31115UBUNTU-CVE-2025-31115openSUSE-SU-2025:14984-1
Also known as
DSA-5895-1, USN-7414-1

Charts affected

654 by stars
ChartLatestAffected imagesRadar Score
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,789
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

2,316
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

49,025
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
xz@5.6.1-r3
5.6.2-r1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

6,491
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

24,995
hellohello-helm-world0.1.01 of 1See more

hello hello-helm-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hngtech11/hello-world:v1f0112dc12cfb
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

652
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,839
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,008
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

4,647
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,293
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,800
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,434
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

1,453
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

9,122
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

25,017
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,973
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

10,839
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,384
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
xz@5.6.2-r0
5.6.2-r1

Open the chart page →

725
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

2,058
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,959
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

12,105
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
xz@5.6.3-r0
5.6.3-r1

Open the chart page →

1,476
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,571
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

6,254
plausible-analyticsimioVerified publisher0.4.22 of 5See more

plausible-analytics imio 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
xz-utils@5.4.1-0.2
5.4.1-1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,418
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,192
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,775
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

3,493
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

5,062
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,868
jenainseefrlab3.1.01 of 1See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
stain/jena-fuseki:latestb1d0c96f19ad
xz@5.6.1-r3
5.6.2-r1

Open the chart page →

1,262
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

17,852
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

2,457
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
xz-utils@5.4.1-0.2
5.4.1-1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

45,239
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
xz@5.4.3-r0
5.4.3-r1

Open the chart page →

5,713
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

10,780
13ftjeffrescVerified publisher0.2.01 of 1See more

13ft jeffresc 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
xz@5.4.5-r0
5.4.5-r1

Open the chart page →

888
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,489
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

3,999
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2

Open the chart page →

6,568
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
xz-utils@5.4.1-0.2
5.4.1-1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
xz-utils@5.4.1-0.2
5.4.1-1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

16,600
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,611
bitcoin-stackk8s-chartsVerified publisher1.0.11 of 1See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
blockstream/bitcoind:27.29472492530e3
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

2,419
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-31115.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
xz-utils@5.4.1-0.2
5.4.1-1

Open the chart page →

4,105

Container images carrying it

729 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.6.2-r1
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1
6
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
xz-utils@5.4.1-0.2
5.4.1-1
5
library/postgres:122f2a8c2a7d10
xz-utils@5.4.1-0.2
5.4.1-1
5
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
xz@5.4.3-r0
5.4.3-r1
5
bitnamilegacy/postgresql:16233f361c5819
xz-utils@5.4.1-0.2
5.4.1-1
4
library/nginx:1.27.1287ff321f9e3
xz-utils@5.4.1-0.2
5.4.1-1
4
opea/llm-tgi:1.00c25aab3f106
xz-utils@5.4.1-0.2
5.4.1-1
4
shashkist/flask-contacts-app:latest581de1fd6084
xz-utils@5.4.1-0.2
5.4.1-1
4
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
xz-utils@5.4.1-0.2
5.4.1-1
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
xz-utils@5.4.1-0.2
5.4.1-1
3
gchq/hdfs:3.3.35ec58edbb2db
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
3
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
xz@5.6.2-r0
5.6.2-r1
3
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
xz@5.6.3-r0
5.6.3-r1
3
library/docker:20.10-dind:20-dindaf96c680a7e1
xz@5.4.3-r0
5.4.3-r1
3
library/nginx:1.25.5-alpine:1.25-alpine516475cc129d
xz@5.4.5-r0
5.4.5-r1
3
library/nginx:1.25:1.25.5a484819eb602
xz-utils@5.4.1-0.2
5.4.1-1
3
library/postgres:15.7-alpine:15.7-alpine3.20468d34fefd63
xz@5.6.1-r3
5.6.2-r1
3
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
xz@5.4.3-r0
5.4.3-r1
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
xz@5.4.3-r0
5.4.3-r1
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
xz-utils@5.4.1-0.2
5.4.1-1
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
xz-utils@5.4.1-0.2
5.4.1-1
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
xz-utils@5.4.1-0.2
5.4.1-1
3
quay.io/devtron/ai-agent:0.0.16545dac92173
xz-utils@5.4.1-0.2
5.4.1-1
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.2
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
xz@5.4.3-r0
5.4.3-r1
3
apache/tika:2.9.2.1-fullae0b86d3c4d0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.2
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
xz-utils@5.4.1-0.2
5.4.1-1
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
xz-utils@5.4.1-0.2
5.4.1-1
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
xz-utils@5.4.1-0.2
5.4.1-1
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
xz@5.4.3-r0
5.4.3-r1
2
dtzar/helm-kubectl:3.14.455429449408e
xz@5.4.5-r0
5.4.5-r1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
xz-utils@5.4.1-0.2
5.4.1-1
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
xz-utils@5.4.1-0.2
5.4.1-1
2
langgenius/dify-sandbox:0.2.009b7e8705673
xz-utils@5.4.1-0.2
5.4.1-1
2
library/nginx:1.27.098f8ec75657d
xz-utils@5.4.1-0.2
5.4.1-1
2
library/phpmyadmin:5.2.16e75aa8f767c
xz-utils@5.4.1-0.2
5.4.1-1
2
library/postgres:16.109f23e02d766
xz-utils@5.4.1-0.2
5.4.1-1
2
library/postgres:16.24aea012537ed
xz-utils@5.4.1-0.2
5.4.1-1
2
library/postgres:16.4e62fbf9d3e2b
xz-utils@5.4.1-0.2
5.4.1-1
2
library/postgres:11-alpineea50b9fd617b
xz@5.4.5-r0
5.4.5-r1
2
library/python:3.7eedf63967cdb
xz-utils@5.4.1-0.2
5.4.1-1
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.