StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,985
of 17,787 indexed, latest versions
Container images
2,125
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,985 of 17,787 indexed charts deploy, on 2,125 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,816
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0297
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,985 by stars
ChartLatestAffected imagesRadar Score
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,749
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

4,914
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,401
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
grafana/fluent-plugin-loki:latest8a3882e8c28b
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,189
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

18,884
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,177
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,028
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

22,425
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

6,226
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

24,356
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,164
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

15,781
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,233
giphy-appdavidy-helm-charts-repository0.1.21 of 1See more

giphy-app davidy-helm-charts-repository 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
davidy/giphy-app:1.0.2-arm41b2355cc23a
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

704
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

10,116
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,233
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
defactops/defactops-backend:1.0.2307b663c0092a
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

4,353
airtraildefault-ghVerified publisher0.2.21 of 2See more

airtrail default-gh 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
johly/airtrail:v3.11.19f702b91e0e7
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

1,675
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,846
isponsorblocktvdefault-ghVerified publisher1.0.51 of 1See more

isponsorblocktv default-gh 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/dmunozv04/isponsorblocktv:v2.9.05b8cfa805cb6
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

546
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,952
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,656
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,560
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

7,259
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

8,154
deployhubdeployhubVerified publisher10.0.4151 of 11See more

deployhub deployhub 10.0.415

1 of the 11 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

11,161
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

14,910
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
xz@5.6.3-r0
5.8.3-r0

Open the chart page →

2,096
devnopesdevnopes0.1.81 of 1See more

devnopes devnopes 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sokushinbutsu/devnopes:latest0bbd90448671
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

462
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/codingducksrl/laravel:8.15be52524664c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

30,150
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/codingducksrl/laravel:8.15be52524664c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

29,151
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

13,036
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

2,549
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

9,152
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

12,999
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

4,688
devtron-enterprisedevtron48.0.08 of 28See more

devtron-enterprise devtron 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

66,542
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,969
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

11,957
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,699
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

9,152
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

12,999
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

4,688
devtron-enterprisedevtron-labs48.0.08 of 28See more

devtron-enterprise devtron-labs 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

66,542
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,969
devtron-operatordevtron-labs0.23.35 of 11See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
quay.io/devtron/postgres:14.91b594392f7cb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

31,447
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

11,957
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,699
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.03 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
library/rabbitmq:3-managemente582c0bc7766
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
oscarsotosanchez/weatherservice:v1.0911ec961d10b
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

27,608

Container images carrying it

2,125 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
esphome/esphome:2024.3.09ab8cc88b28c
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
esphome/esphome:2024.12.2b2c6322700ac
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
espocrm/espocrm:9.3.101b5a24504ed9
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
esteban1930/frontend-1:1.8.0f9078279632c
xz@5.8.1-r0
5.8.3-r0
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
ethersphere/bee:2.2.0a884fd84b72f
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ethersphere/beekeeper:lateste4cda693ed63
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ethpandaops/assertoor:latest1efa2fba6711
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ethpandaops/eleel:mainb8f1b707aee0
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ethpandaops/forky:debian-latestc937f4ba737c
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ethpandaops/observoor:masterc7e5055defcb
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ethpandaops/spamoor:latest5f731b20ec50
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
evoapicloud/evolution-manager:latestcbfeb314afb9
xz@5.8.1-r0
5.8.3-r0
1
extrim/perlite:1.5.99cb7eb5598b6
xz@5.6.3-r0
5.8.3-r0
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
falcosecurity/event-generator:latest932956d86c99
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
federid/webhook:0.1.0fbfb7c6510a7
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
felipecs8/app-db-connection-test:v129e06c9c6385
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
firefart/requesttracker:5.0.40d6249906d8c
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
fireflyiii/core:version-6.6.6ae69fdd95cde
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
flanksource/apm-hub:v0.0.471dacc3195bf9
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
flanksource/batch-runner:v1.0.44689687a7cf95
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
flashcatcloud/categraf:latest42e6ab16472e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
flashcatcloud/nightingale:8.5.1421acb36181b
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
fluent/fluent-bit:4.2.6a52221a2a3eb
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
fluent/fluent-bit:4.0-debuge76397ef3983
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
flyway/flyway:9.1545b5d7cdc75a
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
fnzv/dump1090:latestb3079b95c336
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
foldingathome/fah-gpu:latest5ef7742d1eb4
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
folioci/mod-z3950:latest2493041ce880
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
fosrl/pangolin:1.13.0c32ad797ab96
xz@5.8.1-r0
5.8.3-r0
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
free5gmano/nextepc-mongodb:latest36f806935519
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
freedom98/flask:k3.0d7ce1533f297
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
galaxy/cloudman-server:lateste5c265fe9fcd
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
galaxy/galaxy-init:v18.010267bad550e6
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2
1
galaxy/galaxy-stable:v18.018e577a626dfd
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
gchq/accumulo:2.0.1c460bb587d6d
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.