StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,975
of 17,792 indexed, latest versions
Container images
2,107
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,975 of 17,792 indexed charts deploy, on 2,107 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,802
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0293
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,975 by stars
ChartLatestAffected imagesRadar Score
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

7,956
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,632
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

5,347
gridgain9gridgainVerified publisher1.1.102 of 2See more

gridgain9 gridgain 1.1.10

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
xz@5.8.2-r0
5.8.3-r0
library/debian:12.12-slimd5d3f9c23164
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,221
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

2,598
routergroundcover1.12.3702See more

router groundcover 1.12.370

2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
xz-utils@5.8.1-1
5.8.1-1+e1

Open the chart page →

—
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
xz@5.6.1-r3
5.8.3-r0
clsen2024/gwangju_2-3:service-a-151b1d45961cd
xz@5.6.1-r3
5.8.3-r0
clsen2024/gwangju_2-3:service-c-1efb1586c8299
xz@5.6.1-r3
5.8.3-r0

Open the chart page →

6,506
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

2,949
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,301
octoboxhalkeye0.1.11 of 1See more

octobox halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
octoboxio/octobox:latestd909041c46eb
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

3,256
hatchet-hahatchetOfficialVerified publisher0.19.02 of 8See more

hatchet-ha hatchet 0.19.0

2 of the 8 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
xz-utils@5.4.1-1
5.4.1-1+deb12u1
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,407
hatchet-stackhatchetOfficialVerified publisher0.19.02 of 8See more

hatchet-stack hatchet 0.19.0

2 of the 8 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
xz-utils@5.4.1-1
5.4.1-1+deb12u1
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,407
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

9,178
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

6,751
heliconehelicone0.1.423 of 14See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

25,183
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,586
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,862
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

10,673
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,242
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

6,036
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
xz@5.6.3-r0
5.8.3-r0

Open the chart page →

4,651
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,829
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

24,171
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

4,599
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

4,310
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,817
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,462
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

9,148
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,675
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

9,485
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

10,027
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

18,938
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

29,930
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,304
immichhelmforgeVerified publisher1.2.83 of 5See more

immich helmforge 1.2.8

3 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
xz-utils@5.4.1-1
5.4.1-1+deb12u1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
xz-utils@5.8.1-1
5.8.1-1+deb13u1
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

11,122
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,361
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,453
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

9,771
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,560
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

4,819
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

6,068
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,563
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

12,680
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,626
openaevhelm-openbasVerified publisher2.0.52 of 7See more

openaev helm-openbas 2.0.5

2 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
xz-utils@5.4.1-1
5.4.1-1+deb12u1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,528
openbashelm-openbasVerified publisher1.8.144 of 7See more

openbas helm-openbas 1.8.14

4 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
xz-utils@5.4.1-1
5.4.1-1+deb12u1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
xz-utils@5.4.1-1
5.4.1-1+deb12u1
openbas/caldera-server:5.1.0a277796d9724
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
openbas/platform:2.0.5d986d80b0a75
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

25,190
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,242
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,154
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

6,085
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,996

Container images carrying it

2,107 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
xz@5.8.1-r0
5.8.3-r0
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
zimengxiong/excalidash-frontend:0.4.27242629350b06
xz@5.8.2-r0
5.8.3-r0
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/akpw/mktxp:1.2.17bd6f22f7db0a
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
xz@5.6.3-r0
5.8.3-r0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/appscode/csi-driver-cacerts:v0.5.0b6bf1888f9d5
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.