StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,985
of 17,787 indexed, latest versions
Container images
2,125
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,985 of 17,787 indexed charts deploy, on 2,125 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,816
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0297
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,985 by stars
ChartLatestAffected imagesRadar Score
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,749
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

4,914
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,401
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
grafana/fluent-plugin-loki:latest8a3882e8c28b
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,189
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

18,884
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,177
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,028
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

22,425
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

6,226
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

24,356
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,164
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

15,781
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,233
giphy-appdavidy-helm-charts-repository0.1.21 of 1See more

giphy-app davidy-helm-charts-repository 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
davidy/giphy-app:1.0.2-arm41b2355cc23a
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

704
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

10,116
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,233
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
defactops/defactops-backend:1.0.2307b663c0092a
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

4,353
airtraildefault-ghVerified publisher0.2.21 of 2See more

airtrail default-gh 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
johly/airtrail:v3.11.19f702b91e0e7
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

1,675
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,846
isponsorblocktvdefault-ghVerified publisher1.0.51 of 1See more

isponsorblocktv default-gh 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/dmunozv04/isponsorblocktv:v2.9.05b8cfa805cb6
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

546
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,952
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,656
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,560
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

7,259
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

8,154
deployhubdeployhubVerified publisher10.0.4151 of 11See more

deployhub deployhub 10.0.415

1 of the 11 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

11,161
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

14,910
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
xz@5.6.3-r0
5.8.3-r0

Open the chart page →

2,096
devnopesdevnopes0.1.81 of 1See more

devnopes devnopes 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sokushinbutsu/devnopes:latest0bbd90448671
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

462
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/codingducksrl/laravel:8.15be52524664c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

30,150
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/codingducksrl/laravel:8.15be52524664c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

29,151
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

13,036
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

2,549
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

9,152
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

12,999
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

4,688
devtron-enterprisedevtron48.0.08 of 28See more

devtron-enterprise devtron 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

66,542
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,969
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

11,957
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,699
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

9,152
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

12,999
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

4,688
devtron-enterprisedevtron-labs48.0.08 of 28See more

devtron-enterprise devtron-labs 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

66,542
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,969
devtron-operatordevtron-labs0.23.35 of 11See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

31,447
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

11,957
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,699
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.03 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
library/rabbitmq:3-managemente582c0bc7766
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
oscarsotosanchez/weatherservice:v1.0911ec961d10b
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

27,608

Container images carrying it

2,125 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:9.252cb72a9e3da
xz@5.6.3-r0
5.8.3-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
xz@5.6.2-r0
5.8.3-r0
1
dragonflyoss/client:v0.1.82edf3e921f4e0
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
dremio/dremio-oss:24.1.080ed2e3b7c43
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
drorivry4/rego:lateste035d49b15ca
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
drpcorg/dshackle:0.54.08858fae1859d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
drumsergio/duplicacy-exporter:0.3.4ca3476077215
xz@5.8.2-r0
5.8.3-r0
1
drumsergio/genieacs:1.2.16.028244054e1bf
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
dserio83/velero-api:0.3.16b3d9115fee2
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
dserio83/velero-watchdog:0.1.8d5deae589229
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
duck1123/cert-downloader:latest0e29f19fa67c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
duck1123/lnd-fileserver:latest9d6fb247b714
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
xz@5.8.1-r0
5.8.3-r0
1
elastic/apm-server:7.17.6c7a1c63257d0
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
elastictranscoder/media:627e21dc963ab3858c6b
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
elastictranscoder/media-storage:f6d861a026208b8c2359
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
elastiflow/flow-collector:7.26.0fee67842e16b
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
elautoestopista/aeneabot:4.2.1125ba620d528
xz@5.8.2-r0
5.8.3-r0
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
xz@5.6.1-r3
5.8.3-r0
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
emqx/ecp-ui:2.5.1e33e9816f147
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
emqx/emqx:5.8.935b46f7aa7a0
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
enclavenetworks/enclave:latest0a99759300d1
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
engrmth/bnkr:2.1.06d8464e6f0e8
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
envoyproxy/envoy:v1.30.92956bd9de830
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
envoyproxy/envoy:v1.33.056da5afd7df3
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
envoyproxy/envoy:v1.31-latestcaa5b411be16
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
envoyproxy/envoy:v1.34-latestcfc0678bc03c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
envoyproxy/envoy:v1.30.1e596fda6a0ce
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
erenozcan17/react_frontend:v4.56e1b14973f9b
xz@5.8.1-r0
5.8.3-r0
1
erigontech/erigon:v2.61.288706754b627
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
erlangsolutions/mongooseim:6.6.0cc5bf032931f
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
escaping/core-keeper-dedicated:latest87fa79255962
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
esphome/esphome:2026.7.44866347cb5b4
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
esphome/esphome:2026.8.285abea33854b
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.