StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,980
of 17,797 indexed, latest versions
Container images
2,118
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,980 of 17,797 indexed charts deploy, on 2,118 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,810
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0296
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,980 by stars
ChartLatestAffected imagesRadar Score
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
xz@5.6.3-r0
5.8.3-r0

Open the chart page →

2,820
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,995
jdownloaderschichtelVerified publisher0.1.151 of 1See more

jdownloader schichtel 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jlesage/jdownloader-2:v26.03.13d6cb102bd9b
xz@5.6.2-r1
5.8.3-r0

Open the chart page →

539
keycloak-webhook-routerschichtelVerified publisher0.1.01 of 1See more

keycloak-webhook-router schichtel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

704
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,276
nvme-exporterschichtelVerified publisher0.1.61 of 1See more

nvme-exporter schichtel 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

1,071
pev2schichtelVerified publisher0.3.01 of 1See more

pev2 schichtel 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,179
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,893
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,384
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,574
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
xz-utils@5.8.1-1
5.8.1-1+deb13u1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

8,316
zncschichtelVerified publisher0.3.11 of 1See more

znc schichtel 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/znc:1.10.1c731c6a9b8b6
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

750
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,224
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
typesense/typesense:0.25.1035ccfbc3fd8
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,119
synapse-adminschoenwald1.0.11 of 1See more

synapse-admin schoenwald 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,798
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,035
mikrotik-exporterschoolguys-helmcharts0.2.41 of 1See more

mikrotik-exporter schoolguys-helmcharts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/akpw/mktxp:1.2.17bd6f22f7db0a
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

583
satisfactory-serverschoolguys-helmcharts0.1.81 of 1See more

satisfactory-server schoolguys-helmcharts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,476
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

4,931
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,136
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,298
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

4,728
seawise-dashboardseawiseVerified publisher1.7.11 of 1See more

seawise-dashboard seawise 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
shwcloud/seawise-backup:v1.7.1a97479a54df4
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,109
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

843
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2

Open the chart page →

23,099
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,415
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.16d210dc69321e
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

10,984
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,341
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

5,510
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

4,042
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,208
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

1,294
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

7,718
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,070
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,317
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,317
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

1,021
moksi-gitops0.16.41 of 2See more

mok si-gitops 0.16.4

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
xz@5.6.1-r3
5.8.3-r0

Open the chart page →

664
counter-dhlsikademo0.3.02 of 3See more

counter-dhl sikademo 0.3.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ondrejsika/counter:latestd95eaeee2172
xz-utils@5.8.1-1
5.8.1-1+deb13u1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

4,910
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,196
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,196
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,196
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
xz@5.6.3-r0
5.8.3-r0

Open the chart page →

643
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

2,229
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,115
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

2,609
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,867
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
xz@5.6.1-r3
5.8.3-r0

Open the chart page →

2,439

Container images carrying it

2,118 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
omecproject/onos-progran:1.0.05715e5648aa0
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
omecproject/openmme:master-latest64776cb9edb3
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ondrejsika/counter:latestd95eaeee2172
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
onosproject/onos:2.2.144914a8d4b3f
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
onyxdotapp/onyx-backend:latest473fdffe4e67
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
opea/asr:1.025dd26d9cd09
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/chatqna:1.038c51b791efa
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/chatqna-conversation-ui:v0.9bdb9ec215872
xz@5.6.2-r0
5.8.3-r0
1
opea/codegen:1.058f91683892d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/codegen-ui:1.02bee4eb66f3e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/codetrans:1.0e2436483b73d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/codetrans-ui:1.03ef121f34610
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/docsum:1.03eaa91849512
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/docsum-ui:1.07f854e9bffaf
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/guardrails-tgi:1.0262c6048aab8
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/guardrails-tgi:latestf68bec6a1271
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/speecht5:1.0249afad3d268
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/tts:1.0257ae94709e9
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opea/web-retriever-chroma:1.0fe08165d7770
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
openbas/caldera-server:5.1.0a277796d9724
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
openbas/platform:2.0.5d986d80b0a75
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opencsghq/csghub-server:v2.5.0-ee587046575c2c
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
xz@5.6.3-r1
5.8.3-r0
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
opendatacube/explorer:latest120457ffcd69
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
opendatacube/pipelines:wofs-1.225d810e8504b8
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
opendatacube/restcube:latest91870111837c
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
opendatacube/wms:latest1b90cdf68831
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
opendatacube/wps:latest80df355a660b
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
openelevation/open-elevation:latest82fb21612e86
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
openkm/openkm-ce:6.3.113bc465a7461b
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
opennms/sentinel:36.0.288869082a14f
xz@1:5.6.2-4.el10_0
1:5.6.2-4.el10_2.1
1
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
xz@5.6.2-r0
5.8.3-r0
1
openproject/hocuspocus:release-338001b288dc1359dfb5
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
openthread/otbr:latestf307f59f6432
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
1
openvino/model_server:2025.2.11e7cd1d70cc1
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
xz@5.6.3-r1
5.8.3-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.