StackRadar

CVE-2026-14164

High

Advisory

Published 30 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
166
of 17,781 indexed, latest versions
Container images
195
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libarchive security update

Carried by container images the latest versions of 166 of 17,781 indexed charts deploy, on 195 images.

Affected packageAffected versionsFixed inImages
libarchiverpm3.5.3-3.el9, 3.5.3-4.el9, 3.5.3-4.el9.0.1, 3.5.3-5.el9_6+4 more0:3.5.3-11.el9_8, 0:3.7.7-10.el10_2148
libarchivedeb3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2, 3.4.0-2ubuntu1.5, 3.6.0-1ubuntu1+16 more3.4.0-2ubuntu1.5+esm3, 3.6.0-1ubuntu1.8, 3.6.2-1+deb12u5, 3.7.2-2ubuntu0.8+1 more47
OSV records
DEBIAN-CVE-2026-14164RHSA-2026:52674RHSA-2026:52675RLSA-2026:52674RLSA-2026:52675UBUNTU-CVE-2026-14164
Also known as
RHSA-2026:58558, RHSA-2026:58573, RHSA-2026:58574, USN-8581-1

Charts affected

166 by stars
ChartLatestAffected imagesRadar Score
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

3,460
zammad-ldap-syncit-at-mVerified publisher0.6.51 of 1See more

zammad-ldap-sync it-at-m 0.6.5

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

1,345
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libarchive@3.7.2-2
3.7.2-2ubuntu0.8

Open the chart page →

45,239
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

5,669
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libarchive@3.7.4-4
no fix listed

Open the chart page →

9,103
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,459
rspamdklicktippVerified publisher1.6.01 of 1See more

rspamd klicktipp 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

1,775
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
libarchive@3.6.0-1ubuntu1.4
3.6.0-1ubuntu1.8

Open the chart page →

4,414
authorino-operatorkuadrantOfficialVerified publisher0.26.01 of 1See more

authorino-operator kuadrant 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/kuadrant/authorino-operator:v0.26.003b2acc469f4
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

219
listener-operatorkubedoopVerified publisher0.4.01 of 6See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

4,373
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

4,341
kubemacpoolkubemacpoolVerified publisher0.3.01 of 1See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

1,607
kubernetes-nmstatekubernetes-nmstateVerified publisher0.87.01 of 1See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/nmstate/kubernetes-nmstate-operator:v0.87.04dce694f01ea
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

354
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

1,417
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

2,507
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,937
miot-modulithmicroboxlabs0.6.01 of 1See more

miot-modulith microboxlabs 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,414
modulariotmicroboxlabs0.9.01 of 4See more

modulariot microboxlabs 0.9.0

1 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

2,256
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,261
enterprise-operatormongodb-helm-charts1.33.01 of 1See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
libarchive@3.5.3-5.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,536
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libarchive@3.7.4-4
no fix listed

Open the chart page →

11,950
neuralbank-stackneuralbank-stack0.1.02 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

5,191
neurofaceneurofaceVerified publisher1.4.22 of 3See more

neuroface neuroface 1.4.2

2 of the 3 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

7,310
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm3

Open the chart page →

22,658
nutanix-core-files-cluster-operatornutanix-helm-releasesVerified publisher1.1.01 of 1See more

nutanix-core-files-cluster-operator nutanix-helm-releases 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
nutanix/cn-rwx-operator:1.1.00082e0cebd42
libarchive@3.7.7-8.el10_1
0:3.7.7-10.el10_2

Open the chart page →

292
cluster-managerocm-helm-chartsVerified publisher1.3.11 of 1See more

cluster-manager ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

774
klusterletocm-helm-chartsVerified publisher1.3.11 of 1See more

klusterlet ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

774
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,563
managed-serviceaccountocm-helm-chartsVerified publisher0.10.01 of 1See more

managed-serviceaccount ocm-helm-charts 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/managed-serviceaccount:v0.10.0d6284bd7765a
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

1,033
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

4,626
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
libarchive@3.7.7-8.el10_1
0:3.7.7-10.el10_2

Open the chart page →

2,024
alquimia-studioopenshift0.2.01 of 1See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
alquimiaai/studio:certification38a1f0341982
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

2,370
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
andrianrf/iso-server:latest7da47f525c7d
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

34,671
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

18,922
dify-enterpriseopenshift3.9.810 of 13See more

dify-enterprise openshift 3.9.8

10 of the 13 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
langgenius/dify-ee-audit:3.9.8-ubi9e99aed151fc5
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-collector:3.9.8-ubi9a9b91fd62c94
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-enterprise:3.9.8-ubi9c392a36a4ef7
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-gateway:3.9.8-ubi99e314c29a61f
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-plugin-connector:3.9.8-ubi91848d8f1f144
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-plugin-crd:3.9.8-ubi96f4e0e5f6e5a
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-plugin-daemon-serverless:3.9.8-ubi9d2b8df196d08
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-plugin-manager:3.9.8-ubi9207b343013a0
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

4,660
exporteropenshift1.0.472 of 3See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

13,000
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

4,127
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

8,599
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.21 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

2,045
pmm-ha-dependenciespercona1.0.01 of 4See more

pmm-ha-dependencies percona 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
percona/percona-postgresql-operator:2.8.06cce2698d3f5
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

2,431
ps-operatorpercona1.2.01 of 1See more

ps-operator percona 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
percona/percona-server-mysql-operator:1.2.028bfc38c1d4b
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

249
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8

Open the chart page →

4,616
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.02 of 7See more

kubecost radar-base 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

9,355
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8

Open the chart page →

1,951
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
libarchive@3.7.7-8.el10_1
0:3.7.7-10.el10_2

Open the chart page →

1,837
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.02 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8

Open the chart page →

3,781
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14164.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
libarchive@3.6.0-1ubuntu1.7
3.6.0-1ubuntu1.8

Open the chart page →

7,436

Container images carrying it

195 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
libarchive@3.5.3-3.el9
0:3.5.3-11.el9_8
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
libarchive@3.5.3-3.el9
0:3.5.3-11.el9_8
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
libarchive@3.5.3-3.el9
0:3.5.3-11.el9_8
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
libarchive@3.5.3-3.el9
0:3.5.3-11.el9_8
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
libarchive@3.5.3-3.el9
0:3.5.3-11.el9_8
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
libarchive@3.5.3-5.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm3
1
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm3
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm3
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libarchive@3.6.2-1+deb12u1
3.6.2-1+deb12u5
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libarchive@3.7.4-4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libarchive@3.7.4-4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libarchive@3.7.4-4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
3.6.2-1+deb12u5
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libarchive@3.7.4-4
no fix listed
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
ghcr.io/projectnessie/nessie:0.108.4c0f42874c810
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libarchive@3.7.2-2ubuntu0.6
3.7.2-2ubuntu0.8
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm3
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
libarchive@3.6.0-1ubuntu1.7
3.6.0-1ubuntu1.8
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
libarchive@3.7.2-2ubuntu0.6
3.7.2-2ubuntu0.8
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
libarchive@3.5.3-6.el9_6
0:3.5.3-11.el9_8
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libarchive@3.5.3-4.el9
0:3.5.3-11.el9_8
1
quay.io/backube/volsync:0.16.00d03a6aad575
libarchive@3.5.3-9.el9_7
0:3.5.3-11.el9_8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.