StackRadar

CVE-2025-5914

High

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
244
of 17,781 indexed, latest versions
Container images
298
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libarchive security update

Carried by container images the latest versions of 244 of 17,781 indexed charts deploy, on 298 images.

Affected packageAffected versionsFixed inImages
libarchiverpm3.1.2-10.el7_2, 3.3.2-3.el8, 3.3.2-8.el8_1, 3.3.2-9.el8+9 more0:3.1.2-14.el7_9.1, 0:3.3.3-6.el8_10, 0:3.5.3-6.el9_6272
libarchivedeb3.1.2-11ubuntu0.16.04.3, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2, 3.4.0-2ubuntu1.5+7 more3.1.2-11ubuntu0.16.04.8+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.2-1+deb12u3+1 more26
OSV records
DEBIAN-CVE-2025-5914RHSA-2025:14130RHSA-2025:14135RHSA-2025:14828RLSA-2025:14130RLSA-2025:14135UBUNTU-CVE-2025-5914
Also known as
RHSA-2025:14142, RHSA-2025:14525, RHSA-2025:14528, RHSA-2025:14808, RHSA-2025:14810, RHSA-2025:15024, USN-7601-1, USN-8147-1

Charts affected

244 by stars
ChartLatestAffected imagesRadar Score
mac-ouirm3lVerified publisher1.25.01 of 1See more

mac-oui rm3l 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
rm3l/mac-oui:1.8.03a5e1f95c132
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

1,975
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

16,449
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1

Open the chart page →

6,817
altinity-clickhouse-operatorslamdev0.1.22 of 2See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.20.08f0f582d41f0
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
altinity/metrics-exporter:0.20.01a46d104406d
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

6,422
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

11,459
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1

Open the chart page →

26,657
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

10,090
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

7,713
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5+esm1

Open the chart page →

25,443
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

13,613
akto-mini-testing-kafkaakto1.42.12 of 5See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

6,397
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

11,285
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
hazelcast/management-center:5.3.2f9d34300d330
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

28,131
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5+esm1

Open the chart page →

42,126
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

2,453
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6

Open the chart page →

2,902
app-mobilityappmo0.1.02 of 5See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

12,521
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

2,404
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10

Open the chart page →

4,043
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

2,569
maxscaleappuio2.0.11 of 1See more

maxscale appuio 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10

Open the chart page →

2,903
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

14,728
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

13,352
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
3.6.2-1+deb12u3

Open the chart page →

9,412
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10

Open the chart page →

6,389
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10

Open the chart page →

7,776
keycloak-mcp-serverchristianhuthVerified publisher1.2.01 of 1See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6

Open the chart page →

1,423
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
cockroachdb/cockroach:v22.2.91116820f4134
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10

Open the chart page →

20,900
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libarchive@3.1.2-11ubuntu0.16.04.3
3.1.2-11ubuntu0.16.04.8+esm2

Open the chart page →

33,963
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

25,151
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
libarchive@3.3.2-8.el8_1
0:3.3.3-6.el8_10

Open the chart page →

25,456
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
beopenit/door-helm:v3.0.1b4d9f9bee224
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

19,338
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

5,958
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
libarchive@3.5.3-5.el9_6
0:3.5.3-6.el9_6

Open the chart page →

1,797
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10
confluentinc/cp-zookeeper:6.1.078c190f4472c
libarchive@3.3.2-9.el8
0:3.3.3-6.el8_10

Open the chart page →

58,857
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
razzy10/product-service:latest702e411956db
libarchive@3.5.3-5.el9_6
0:3.5.3-6.el9_6

Open the chart page →

3,547
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10

Open the chart page →

7,486
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
libarchive@3.5.3-4.el9.0.1
0:3.5.3-6.el9_6

Open the chart page →

3,191
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10

Open the chart page →

6,237
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libarchive@3.7.2-2ubuntu0.1
3.7.2-2ubuntu0.5

Open the chart page →

16,954
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

21,641
doris-foundationdbdorisVerified publisher25.8.01 of 4See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
libarchive@3.5.3-4.el9.0.1
0:3.5.3-6.el9_6

Open the chart page →

3,167
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
quay.io/keycloak/keycloak:20.0054ef67eb7da
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10

Open the chart page →

55,666
drogue-cloud-examplesdrogue-iotVerified publisher0.7.113 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
ghcr.io/ctron/kubectl:1.25e37d61b5277c
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10

Open the chart page →

30,699
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10

Open the chart page →

6,915
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
libarchive@3.3.3-3.el8_5
0:3.3.3-6.el8_10

Open the chart page →

11,482
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

9,764
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-5914.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10

Open the chart page →

4,033

Container images carrying it

298 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libarchive@3.6.2-1+deb12u1
3.6.2-1+deb12u3
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
libarchive@3.3.3-1.el8
0:3.3.3-6.el8_10
1
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
libarchive@3.3.3-4.el8
0:3.3.3-6.el8_10
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
libarchive@3.5.3-3.el9
0:3.5.3-6.el9_6
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
libarchive@3.5.3-5.el9_6
0:3.5.3-6.el9_6
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
libarchive@3.3.2-8.el8_1
0:3.3.3-6.el8_10
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller:v0.3.72a2bb32c0ea8
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
1
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
1
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libarchive@3.6.2-1+deb12u1
3.6.2-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
3.6.2-1+deb12u3
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
libarchive@3.3.3-5.el8
0:3.3.3-6.el8_10
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libarchive@3.5.3-4.el9
0:3.5.3-6.el9_6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.