StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,980
of 17,797 indexed, latest versions
Container images
2,118
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,980 of 17,797 indexed charts deploy, on 2,118 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,810
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0296
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,980 by stars
ChartLatestAffected imagesRadar Score
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

22,165
pieeatpieeatOfficialVerified publisher0.9.31 of 1See more

pieeat pieeat 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/maxiv/pieeat:0.9.3099715479210
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,445
pagespighosh-pages1.0.02 of 3See more

pages pighosh-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sigp/lighthouse:latest-amd6450f66cfebb6d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,544
firehose-ethereumpinaxVerified publisher0.3.22 of 2See more

firehose-ethereum pinax 0.3.2

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sigp/lighthouse:latest-amd6450f66cfebb6d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

7,193
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

11,423
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

6,777
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

6,722
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

4,971
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

12,009
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

7,632
planectlplanectlVerified publisher0.7.05 of 10See more

planectl planectl 0.7.0

5 of the 10 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
xz@5.6.1-r3
5.8.3-r0
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
xz-utils@5.4.1-1
5.4.1-1+deb12u1
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
xz-utils@5.4.1-1
5.4.1-1+deb12u1
library/node:208f693eaa7e0a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
quay.io/argoproj/argocd:v2.14.115fc69e31c755
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

26,158
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,338
k8s-node-image9-1-24pnnl-miscscripts0.2.1492 of 2See more

k8s-node-image9-1-24 pnnl-miscscripts 0.2.149

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.8.3-r0
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,492
k8s-node-image9-1-25pnnl-miscscripts0.2.1052 of 2See more

k8s-node-image9-1-25 pnnl-miscscripts 0.2.105

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.8.3-r0
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,492
k8s-node-image9-1-26pnnl-miscscripts0.2.922 of 2See more

k8s-node-image9-1-26 pnnl-miscscripts 0.2.92

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.8.3-r0
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,492
k8s-node-image9-1-27pnnl-miscscripts0.2.902 of 2See more

k8s-node-image9-1-27 pnnl-miscscripts 0.2.90

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.8.3-r0
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,492
k8s-node-image9-1-28pnnl-miscscripts0.2.1022 of 2See more

k8s-node-image9-1-28 pnnl-miscscripts 0.2.102

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.8.3-r0
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,492
k8s-node-image9-1-29pnnl-miscscripts0.2.642 of 2See more

k8s-node-image9-1-29 pnnl-miscscripts 0.2.64

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
xz@5.6.2-r0
5.8.3-r0
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

1,492
k8s-node-image9-1-30pnnl-miscscripts0.2.561 of 2See more

k8s-node-image9-1-30 pnnl-miscscripts 0.2.56

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

620
k8s-node-image9-1-31pnnl-miscscripts0.2.271 of 2See more

k8s-node-image9-1-31 pnnl-miscscripts 0.2.27

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

620
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

4,297
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

12,998
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

9,227
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

11,255
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

6,587
polyaxonpolyaxon2.16.41 of 5See more

polyaxon polyaxon 2.16.4

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

14,334
beylaportefaix-hub0.1.01 of 1See more

beyla portefaix-hub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
grafana/beyla:1.3.336d07f8d276e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,701
quickwitportefaix-hub0.1.11 of 1See more

quickwit portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.1d29332bdadcc
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,657
postgrespostgresVerified publisher0.1.11 of 1See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:13.12ced3ba927f4c
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

4,951
keydbpozetron0.5.31 of 1See more

keydb pozetron 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
pozetroninc/keydb:v6.0.1653ae64f29da8
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

7,025
Practica_4_helmpr04helm0.1.03 of 7See more

Practica_4_helm pr04helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
library/mongo:5.0.6-focal8e70544b6c76
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
library/rabbitmq:3.9-management8a279e9396a8
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

27,697
practica-helmpractica-helm0.1.03 of 7See more

practica-helm practica-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mongo:4.4-bionic3d0e6df9fd5b
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
library/rabbitmq:3-management-alpine606d8c0d6b3c
xz@5.8.1-r0
5.8.3-r0
slagattollas/weatherservice-practica:latest68e7f56393fc
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

28,537
pagesprasanthi1.0.02 of 3See more

pages prasanthi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,534
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,328
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

8,233
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

2,756
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

3,275
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

4,449
prompt-dbprompt-dbVerified publisher1.0.72 of 3See more

prompt-db prompt-db 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

3,366
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,095
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

2,856
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

14,624
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

12,652
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

12,652
qualys-caqualys-ca-helm3.1.01 of 1See more

qualys-ca qualys-ca-helm 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

1,927
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
xz@5.2.3-lp151.4.3.1
5.8.3-1.1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
xz@5.2.3-lp151.4.3.1
5.8.3-1.1

Open the chart page →

11,954
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

4,408
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,702

Container images carrying it

2,118 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/cosmicrocks/knots:29.2.knots20251010d7db5cd4079b
xz@5.6.2-r1
5.8.3-r0
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
xz@5.6.1-r3
5.8.3-r0
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
xz@5.6.3-r0
5.8.3-r0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/dmunozv04/isponsorblocktv:v2.9.05b8cfa805cb6
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
xz@5.6.3-r0
5.8.3-r0
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/esomore/bitcoin-prometheus-exporter:masterded173632986
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.