StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,980
of 17,797 indexed, latest versions
Container images
2,118
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,980 of 17,797 indexed charts deploy, on 2,118 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,810
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0296
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,980 by stars
ChartLatestAffected imagesRadar Score
pagesnavin-brixton1.0.02 of 3See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

20,262
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

15,453
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

110,325
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

30,398
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
xz-utils@5.4.1-1
5.4.1-1+deb12u1
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,260
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,856
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,833
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,927
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,441
netris-dpu-agentnetrisai0.1.01 of 1See more

netris-dpu-agent netrisai 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

1,584
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

7,500
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,874
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,362
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,362
nginx-sitenginx-site0.1.01 of 1See more

nginx-site nginx-site 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
amaraiheanacho/nginx-site:latest5c86fccf5daa
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

843
ciliumnicklasfrahm-ciliumVerified publisher0.7.42 of 6See more

cilium nicklasfrahm-cilium 0.7.4

2 of the 6 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

7,237
wireguardnicklasfrahm-wireguard0.2.01 of 1See more

wireguard nicklasfrahm-wireguard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

1,160
terraform-backendnimbolus0.3.21 of 2See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/redis:8.2.24521b581dbdd
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,492
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,950
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

10,296
firehose-corenodeifyVerified publisher1.2.62 of 2See more

firehose-core nodeify 1.2.6

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sigp/lighthouse:latest-amd6450f66cfebb6d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,586
firehose-ethereumnodeifyVerified publisher1.7.12 of 2See more

firehose-ethereum nodeify 1.7.1

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
sigp/lighthouse:v8.1.344aa773dcf27
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

5,695
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

4,756
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

22,795
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

15,210
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

15,282
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

15,266
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2

Open the chart page →

41,463
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
linuxserver/codimd:latestb801bbcf6386
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

27,548
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

27,757
nutanix-core-files-cluster-operatornutanix-helm-releasesVerified publisher1.1.01 of 1See more

nutanix-core-files-cluster-operator nutanix-helm-releases 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
nutanix/cn-rwx-operator:1.1.00082e0cebd42
xz@1:5.6.2-4.el10_0
1:5.6.2-4.el10_2.1

Open the chart page →

317
firecrawlobeoneVerified publisher3.0.63See more

firecrawl obeone 3.0.6

3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-management-alpine606d8c0d6b3c
xz@5.8.1-r0
5.8.3-r0
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
xz-utils@5.8.1-1
5.8.1-1+deb13u1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

—
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,015
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,103
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
xz@5.8.1-r0
5.8.3-r0
library/postgres:134689940c6838
xz-utils@5.8.1-1
5.8.1-1+deb13u1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

17,161
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

2,349
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,590
octant-uioctant-ui0.0.1-testing1 of 1See more

octant-ui octant-ui 0.0.1-testing

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,105
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

5,826
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,328
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,644
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,352
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,879
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

8,140
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

9,083
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,108
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

6,422
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

9,766
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,716
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

3,915

Container images carrying it

2,118 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.