StackRadar

CVE-2025-58058

Medium

Advisory

Published 28 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
146
of 17,781 indexed, latest versions
Container images
127
deployed by those charts
Fix available
1 of 1
affected package

github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives

Carried by container images the latest versions of 146 of 17,781 indexed charts deploy, on 127 images.

Affected packageAffected versionsFixed inImages
github.com/ulikunitz/xzgolangv0.5.5, v0.5.6, v0.5.7, v0.5.8+5 more0.5.15127
OSV records
GHSA-jc7w-c686-c4v9
Also known as
GO-2025-3922

Charts affected

146 by stars
ChartLatestAffected imagesRadar Score
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

5,074
helm-controllerazureorkestra0.1.11 of 2See more

helm-controller azureorkestra 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

7,705
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

13,459
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

10,629
stablecalltelemetry0.7.11 of 9See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

7,702
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.2e808e0644ce1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

4,705
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,330
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

4,423
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

6,921
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

6,162
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15

Open the chart page →

5,973
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

1,028
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

7,486
octolxddevplayer0Verified publisher0.1.11 of 1See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

2,525
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15

Open the chart page →

10,466
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15

Open the chart page →

10,466
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

68,240
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

3,046
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,736
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

6,078
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,684
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

2,420
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

24,995
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

2,969
fpga-cloudinaccelVerified publisher1.2.21 of 3See more

fpga-cloud inaccel 1.2.2

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
inaccel/device-selector:latest44b4f274f40b
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,152
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,478
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,478
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

1,836
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,999
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

3,968
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,893
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,970
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

3,812
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

3,199
kubeclaritykubeclarity2.23.32 of 5See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/ulikunitz/xz@v0.5.10
0.5.15
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

5,496
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

17,798
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

18,316
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

6,824
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,378
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,271
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,768

Container images carrying it

127 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/ulikunitz/xz@v0.5.14
0.5.15
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/ulikunitz/xz@v0.5.6
0.5.15
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/ulikunitz/xz@v0.5.9
0.5.15
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
github.com/ulikunitz/xz@v0.5.14
0.5.15
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/ulikunitz/xz@v0.5.14
0.5.15
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
quay.io/operator-framework/olm1b6002156f56
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
quay.io/operator-framework/olm40d0363f4aa6
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/ulikunitz/xz@v0.5.9
0.5.15
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/ulikunitz/xz@v0.5.12
0.5.15
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.