StackRadar

CVE-2025-58058

Medium

Advisory

Published 28 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
146
of 17,781 indexed, latest versions
Container images
127
deployed by those charts
Fix available
1 of 1
affected package

github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives

Carried by container images the latest versions of 146 of 17,781 indexed charts deploy, on 127 images.

Affected packageAffected versionsFixed inImages
github.com/ulikunitz/xzgolangv0.5.5, v0.5.6, v0.5.7, v0.5.8+5 more0.5.15127
OSV records
GHSA-jc7w-c686-c4v9
Also known as
GO-2025-3922

Charts affected

146 by stars
ChartLatestAffected imagesRadar Score
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

5,074
helm-controllerazureorkestra0.1.11 of 2See more

helm-controller azureorkestra 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

7,705
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

13,459
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

10,629
stablecalltelemetry0.7.11 of 9See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

7,702
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.2e808e0644ce1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

4,705
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,330
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

4,423
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

6,921
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

6,162
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15

Open the chart page →

5,973
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

1,028
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

7,486
octolxddevplayer0Verified publisher0.1.11 of 1See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

2,525
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15

Open the chart page →

10,466
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15

Open the chart page →

10,466
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

68,240
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

3,046
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,736
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

6,078
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,684
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

2,420
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

24,995
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

2,969
fpga-cloudinaccelVerified publisher1.2.21 of 3See more

fpga-cloud inaccel 1.2.2

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
inaccel/device-selector:latest44b4f274f40b
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,152
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,478
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,478
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

1,836
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,999
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

3,968
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,893
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,970
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/ulikunitz/xz@v0.5.6
0.5.15

Open the chart page →

3,812
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

3,199
kubeclaritykubeclarity2.23.32 of 5See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/ulikunitz/xz@v0.5.10
0.5.15
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

5,496
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/ulikunitz/xz@v0.5.8
0.5.15

Open the chart page →

17,798
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

18,316
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/ulikunitz/xz@v0.5.12
0.5.15

Open the chart page →

6,824
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

1,378
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/ulikunitz/xz@v0.5.10
0.5.15

Open the chart page →

4,271
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/ulikunitz/xz@v0.5.11
0.5.15

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-58058.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15

Open the chart page →

5,768

Container images carrying it

127 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
natsio/nats-box:0.14.1a67913df95f1
github.com/ulikunitz/xz@v0.5.11
0.5.15
5
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/ulikunitz/xz@v0.5.9
0.5.15
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/ulikunitz/xz@v0.5.5
0.5.15
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/ulikunitz/xz@v0.5.8
0.5.15
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/ulikunitz/xz@v0.5.11
0.5.15
3
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/ulikunitz/xz@v0.5.8
0.5.15
3
clickhouse/clickhouse-server:24.2ed9640bfff07
github.com/ulikunitz/xz@v0.5.10
0.5.15
2
filebrowser/filebrowser:v2.23.086e8449ff8ff
github.com/ulikunitz/xz@v0.5.9
0.5.15
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/ulikunitz/xz@v0.5.12
0.5.15
2
hashicorp/vault:1.8.34db614d40d0e
github.com/ulikunitz/xz@v0.5.7
0.5.15
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/ulikunitz/xz@v0.5.10
0.5.15
2
hashicorp/vault:1.12.18de4d5f31b38
github.com/ulikunitz/xz@v0.5.10
0.5.15
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/ulikunitz/xz@v0.5.12
0.5.15
2
natsio/nats-box:0.11.09fbf7bf684e4
github.com/ulikunitz/xz@v0.5.8
0.5.15
2
xelalex/dregsy:0.4.3574054e1c417
github.com/ulikunitz/xz@v0.5.10
0.5.15
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/ulikunitz/xz@v0.5.14
0.5.15
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/ulikunitz/xz@v0.5.11
0.5.15
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/ulikunitz/xz@v0.5.9
0.5.15
2
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
aquasec/trivy:0.43.1944a04445179
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
aquasec/trivy:0.32.0973d0df16189
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
artifacthub/hub:v1.19.0111918d8c399
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
clickhouse/clickhouse-server:23.8512bb8a21483
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
datadog/agent:7.22.08f20e56b5311
github.com/ulikunitz/xz@v0.5.7
0.5.15
1
datadog/agent:6aad9994de6a7
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/ulikunitz/xz@v0.5.6
0.5.15
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
dollarshaveclub/furan2:master14a257836529
github.com/ulikunitz/xz@v0.5.6
0.5.15
1
filebrowser/filebrowser:v2.18.04fcd47af573c
github.com/ulikunitz/xz@v0.5.6
0.5.15
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/ulikunitz/xz@v0.5.6
0.5.15
1
fission/fission-bundle:1.14.13fcfd8a0fa5d
github.com/ulikunitz/xz@v0.5.9
0.5.15
1
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
fleetdm/fleet:v4.66.012e644b7f40e
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/ulikunitz/xz@v0.5.12
0.5.15
1
gitea/gitea:1.22.376f516a1a8c2
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
gitea/gitea:1.21.6ac73e0da341f
github.com/ulikunitz/xz@v0.5.11
0.5.15
1
gitea/gitea:1.13.0d5ab14cd29af
github.com/ulikunitz/xz@v0.5.6
0.5.15
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/ulikunitz/xz@v0.5.8
0.5.15
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
hashicorp/terraform:1.44dcb45513699
github.com/ulikunitz/xz@v0.5.10
0.5.15
1
hashicorp/terraform:1.9.7b77efab1a448
github.com/ulikunitz/xz@v0.5.10
0.5.15
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.