StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,980
of 17,797 indexed, latest versions
Container images
2,118
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,980 of 17,797 indexed charts deploy, on 2,118 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,810
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0296
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,980 by stars
ChartLatestAffected imagesRadar Score
pagespages-ambala1.0.02 of 3See more

pages pages-ambala 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-andromeda1.0.02 of 3See more

pages pages-andromeda 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespagesbadami1.0.02 of 3See more

pages pagesbadami 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-blackburn1.0.02 of 3See more

pages pages-blackburn 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-botes1.0.02 of 3See more

pages pages-botes 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-brian1.0.02 of 3See more

pages pages-brian 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-buckll1.0.02 of 3See more

pages pages-buckll 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-camden1.0.02 of 3See more

pages pages-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-camden7711.0.02 of 3See more

pages pages-camden771 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-diarmuidkeane1.0.02 of 3See more

pages pages-diarmuidkeane 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-draco1.0.02 of 3See more

pages pages-draco 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-ellora1.0.02 of 3See more

pages pages-ellora 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-finchley1.0.02 of 3See more

pages pages-finchley 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-fornax1.0.02 of 3See more

pages pages-fornax 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-harsh1.0.02 of 3See more

pages pages-harsh 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespagesk1.0.02 of 3See more

pages pagesk 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-microservice-ashim1.0.02 of 3See more

pages pages-microservice-ashim 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-mihai1.0.02 of 3See more

pages pages-mihai 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-nivesh1.0.02 of 3See more

pages pages-nivesh 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespagessandeepgudu1.0.02 of 3See more

pages pagessandeepgudu 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-shubhanker1.0.02 of 3See more

pages pages-shubhanker 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-ssharma09091.0.02 of 3See more

pages pages-ssharma0909 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-sucharitha1.0.02 of 3See more

pages pages-sucharitha 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-sudhir1.0.02 of 3See more

pages pages-sudhir 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-sushi1.0.02 of 3See more

pages pages-sushi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-vasanth58141.0.02 of 3See more

pages pages-vasanth5814 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
pagespages-vjp1.0.02 of 3See more

pages pages-vjp 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
radarr-testpanzer1119Verified publisher0.1.21 of 2See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,282
parcial-1parcial-1-chart1.0.02 of 5See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
xz@5.8.1-r0
5.8.3-r0
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

3,872
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

4,179
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

2,036
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,400
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

4,807
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,877
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

960
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,431
pagespawan-pages1.0.02 of 3See more

pages pawan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
stk-fluent-bit-loki-s3paxtecnologia0.2.11 of 6See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.1

1 of the 6 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

3,744
matomopetbattle11.0.12 of 2See more

matomo petbattle 11.0.1

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
xz-utils@5.4.1-1
5.4.1-1+deb12u1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

11,137
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
tensorflow/serving:latest8a208c232297
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,757
clickhousepetersandor14.3.21 of 1See more

clickhouse petersandor 14.3.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.2.398745843b17f9
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

2,229
mariadbpetersandor15.2.51 of 1See more

mariadb petersandor 15.2.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnami/mariadb:11.7.216a7dae804fb
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,924
memcachedpetersandor14.1.61 of 1See more

memcached petersandor 14.1.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnami/memcached:1.6.38dd8f2cba9a5b
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,411
mongodbpetersandor14.1.81 of 1See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnami/mongodb:8.0.8b3bd5b6be9a0
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

4,156
redispetersandor15.2.21 of 1See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnami/redis:7.4.24e65bf641805
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,762
pgcatpgcatVerified publisher0.2.51 of 1See more

pgcat pgcat 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,805
redis-stack-awsphamxuanduong0.1.01 of 1See more

redis-stack-aws phamxuanduong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.0-v0887cf87cc744
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,299
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,784
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

8,261
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
knspar/phronetis-operator:0.1.60c4f0543ee58
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

16,357

Container images carrying it

2,118 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
xz@5.6.3-r0
5.8.3-r0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/liturgical-app/liturgical-api:1.0.12637bdcebdd8d
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
xz@5.6.1-r3
5.8.3-r0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/monicahq/monica-next:main8be69156acbb
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.