StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,981
of 17,790 indexed, latest versions
Container images
2,121
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,981 of 17,790 indexed charts deploy, on 2,121 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,813
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0296
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,981 by stars
ChartLatestAffected imagesRadar Score
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,244
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

108,315
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

1,869
psmdb-operatorpercona1.23.11 of 1See more

psmdb-operator percona 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
percona/percona-server-mongodb-operator:1.23.0feaff989e253
xz@1:5.6.2-4.el10_0
1:5.6.2-4.el10_2.1

Open the chart page →

271
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

2,877
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,465
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
library/elasticsearch:8.15.0310b9fc03b06
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
library/postgres:16.24aea012537ed
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

13,647
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

8,783
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

6,400
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

24,566
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,469
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,423
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

5,926
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,377
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

5,810
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

15,564
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

7,075
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

3,827
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

28,634
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

10,373
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

18,177
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

4,418
wallarm-ingresswallarmVerified publisher5.3.10-11 of 2See more

wallarm-ingress wallarm 5.3.10-1

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wallarm/ingress-controller:5.3.10.1a1fecfdf987e
xz@5.6.2-r1
5.8.3-r0

Open the chart page →

1,301
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,478
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wger/server:2.6997ead43aabd
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

8,634
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

19,828
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

13,671
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

15,049
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.231 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.23

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

2,411
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
payara/server-full:7.2026.2-jdk2531f1253f0cf8
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,746
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,626
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.02 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
xz-utils@5.8.1-1
5.8.1-1+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

12,092
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

12,081
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

8,387
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

2,387
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

14,969
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

3,395
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

22,304
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

7,794
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,249
s3dartur9010Verified publisher1.0.11 of 1See more

s3d artur9010 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/siafoundation/s3d:bf33bf3b3fcc85f7282
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

1,736
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,327
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

17,951
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
hyperledger/fabric-couchdb:0.4.15f6c724592abf
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2

Open the chart page →

77,883
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
hyperledger/fabric-couchdb:0.4.15f6c724592abf
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2

Open the chart page →

77,863
astradnsastradnsVerified publisher0.2.91 of 2See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

2,649
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

13,219
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

13,544
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

7,246
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

5,117

Container images carrying it

2,121 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
xz@5.8.1-r0
5.8.3-r0
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
xz@5.8.2-r0
5.8.3-r0
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
xz@5.6.3-r1
5.8.3-r0
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
xz@5.6.2-r0
5.8.3-r0
1
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.