StackRadar

CVE-2025-58058

Medium

Advisory

Published 28 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
146
of 17,781 indexed, latest versions
Container images
127
deployed by those charts
Fix available
1 of 1
affected package

github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives

Carried by container images the latest versions of 146 of 17,781 indexed charts deploy, on 127 images.

Affected packageAffected versionsFixed inImages
github.com/ulikunitz/xzgolangv0.5.5, v0.5.6, v0.5.7, v0.5.8+5 more0.5.15127
OSV records
GHSA-jc7w-c686-c4v9
Also known as
GO-2025-3922

Charts affected

146 by stars
ChartLatestAffected imagesRadar Score
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

5,074
helm-controllerazureorkestra0.1.11 of 2See more

helm-controller azureorkestra 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

7,705
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

13,459
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

10,629
stablecalltelemetry0.7.11 of 9See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

7,702
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.2e808e0644ce1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

4,705
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,330
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

4,423
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

6,921
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

6,162
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15

Open the chart page →

5,973
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

1,028
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

7,486
octolxddevplayer0Verified publisher0.1.11 of 1See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

2,525
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15

Open the chart page →

10,466
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15

Open the chart page →

10,466
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

68,240
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

3,046
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,736
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

6,078
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,684
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

2,420
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

24,995
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

2,969
fpga-cloudinaccelVerified publisher1.2.21 of 3See more

fpga-cloud inaccel 1.2.2

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
inaccel/device-selector:latest44b4f274f40b
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,152
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,478
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,478
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

1,836
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,999
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

3,968
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,893
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,970
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

3,812
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

3,199
kubeclaritykubeclarity2.23.32 of 5See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/ulikunitz/xz@v0.5.10
0.5.15
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

5,496
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

17,798
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

18,316
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

6,824
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,378
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,271
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,768

Container images carrying it

127 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hashicorp/vault:1.15.40b01ed3924e6
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
hashicorp/vault:1.14.0b2177a8bfe85
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
hashicorp/vault:1.8.4dfc3500beb0e
github.com/ulikunitz/xz@v0.5.7
0.5.15
1
hashicorp/waypoint:0.11.397d521a27498
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
inaccel/device-selector:latest44b4f274f40b
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
istio/operator:1.10.3655eefa11c84
github.com/ulikunitz/xz@v0.5.7
0.5.15
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
library/vault:1.13.3f98ac9dd97b0
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
natsio/nats-box:0.14.31cc420186664
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
natsio/nats-box:0.13.559cf2e949181
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
natsio/nats-box:0.18.0abdc9f9f0120
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
natsio/nats-box:0.13.3c507bd7e3831
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
natsio/nats-box:0.14.2e808e0644ce1
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
qmcgaw/gluetun:v3.40.02b42bfa04675
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
regclient/regsync:v0.8.33d8d8e40afb7
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/ulikunitz/xz@v0.5.5
0.5.15
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
thesisrobot/lnd:v0.16.4-beta-c287129953689
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
github.com/ulikunitz/xz@v0.5.14
0.5.15
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/kubenetworks/kubevpn:v2.11.7cce8ff866f60
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/ulikunitz/xz@v0.5.9
0.5.15
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/ulikunitz/xz@v0.5.9
0.5.15
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/ulikunitz/xz@v0.5.11
0.5.15
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.