StackRadar

CVE-2026-34743

Medium

Advisory

Published 1 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,977
of 17,781 indexed, latest versions
Container images
2,118
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: xz security update

Carried by container images the latest versions of 1,977 of 17,781 indexed charts deploy, on 2,118 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+10 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1+6 more1,811
xzapk5.4.3-r1, 5.6.1-r3, 5.6.2-r0, 5.6.2-r1+4 more5.8.3-r0295
xzrpm1:5.6.2-4.el10_0, 5.2.3-lp151.4.3.11:5.6.2-4.el10_2.1, 5.8.3-1.112
OSV records
ALPINE-CVE-2026-34743DEBIAN-CVE-2026-34743RHSA-2026:64787RLSA-2026:64787UBUNTU-CVE-2026-34743ECHO-54f0-42da-6974openSUSE-SU-2026:10492-1
Also known as
USN-8362-1

Charts affected

1,977 by stars
ChartLatestAffected imagesRadar Score
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

10,701
jdownloader2jdownloader2Verified publisher1.10.01 of 1See more

jdownloader2 jdownloader2 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jlesage/jdownloader-2:v26.03.13d6cb102bd9b
xz@5.6.2-r1
5.8.3-r0

Open the chart page →

539
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,604
jenkinsjkimVerified publisher5.5.142 of 2See more

jenkins jkim 5.5.14

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

7,387
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.322 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

2 of the 17 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

15,418
ombik8s-home-lab-repo12.2.11 of 1See more

ombi k8s-home-lab-repo 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

1,421
tautullik8s-home-lab-repo12.3.01 of 1See more

tautulli k8s-home-lab-repo 12.3.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,129
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
kafkakraft/kafka-controller:3.7.0f261ad288fce
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
kafkakraft/kafkakraft:3.7.02e4b593b878b
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

14,130
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

5,789
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,228
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

5,264
nginx-php-fpmkokuwa0.1.42 of 2See more

nginx-php-fpm kokuwa 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/php:8.5.2-fpm-alpine3.22a2482c398d60
xz@5.8.1-r0
5.8.3-r0
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

1,838
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
langgenius/dify-sandbox:0.2.009b7e8705673
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

20,403
pgbouncerkubernetes-helm-chart-pgbouncer1.0.151 of 1See more

pgbouncer kubernetes-helm-chart-pgbouncer 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
cradlepoint/pgbouncer:1.0.18f5720b0cd03
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

5,802
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

9,858
kubeseal-webguikubeseal-webgui6.0.42 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
xz-utils@5.4.1-1
5.4.1-1+deb12u1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

4,095
kubesendkubesend0.1.91 of 1See more

kubesend kubesend 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
v3xl/kubesend:0.1.06f62ca96be82
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

1,374
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

7,710
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,662
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

12,422
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

113,791
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
xz@5.8.1-r0
5.8.3-r0

Open the chart page →

5,654
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
xz@5.6.3-r1
5.8.3-r0

Open the chart page →

2,113
langflow-idelangflow0.1.22 of 2See more

langflow-ide langflow 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
langflowai/langflow:latest65796601f3fc
xz@1:5.6.2-4.el10_0
1:5.6.2-4.el10_2.1
langflowai/langflow-frontend:latest54f67f1961fe
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

3,980
langflow-runtimelangflow0.1.11 of 1See more

langflow-runtime langflow 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
langflowai/langflow:latest65796601f3fc
xz@1:5.6.2-4.el10_0
1:5.6.2-4.el10_2.1

Open the chart page →

144
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

35,050
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

4,418
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

7,874
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

6,761
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

7,201
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

2,757
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-audit:2.0.079428add7f38
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-binary-storage:2.0.053decadc102d
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-deployment:2.0.0ea8110886d38
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

70,741
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
xz@5.8.2-r0
5.8.3-r0

Open the chart page →

1,146
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1

Open the chart page →

5,734
magentomagento3.2.32 of 12See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
library/rabbitmq:4.1.0-management935b3f84c1e4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

13,479
plane-enterprisemakeplaneOfficialVerified publisher3.7.12 of 13See more

plane-enterprise makeplane 3.7.1

2 of the 13 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
xz@5.6.1-r3
5.8.3-r0
library/rabbitmq:3.13.6-management-alpine611107e29cce
xz@5.6.2-r0
5.8.3-r0

Open the chart page →

4,942
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

2,975
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1

Open the chart page →

19,187
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
xz-utils@5.8.1-1
5.8.1-1+deb13u1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

6,929
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,753
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3

Open the chart page →

4,137
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
xz-utils@5.8.1-1build2
5.8.1-1ubuntu0.1

Open the chart page →

11,103
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

2,680
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

13,738
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

7,527
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
xz-utils@5.8.1-1
5.8.1-1+deb13u1

Open the chart page →

1,879
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1

Open the chart page →

3,689
clowder2ncsaVerified publisher1.9.76 of 12See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
xz-utils@5.4.1-1
5.4.1-1+deb12u1
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
xz@5.8.1-r0
5.8.3-r0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
xz-utils@5.4.1-1
5.4.1-1+deb12u1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
xz-utils@5.4.1-1
5.4.1-1+deb12u1

Open the chart page →

37,373
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-34743.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1

Open the chart page →

14,250

Container images carrying it

2,118 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
xz-utils@5.4.1-1
5.4.1-1+deb12u1
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
xz-utils@5.4.1-1
5.4.1-1+deb12u1
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
xz-utils@5.4.1-1
5.4.1-1+deb12u1
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
xz-utils@5.4.1-1
5.4.1-1+deb12u1
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
xz@5.8.1-r0
5.8.3-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
xz-utils@5.8.1-1
5.8.1-1+deb13u1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
2
quay.io/frrouting/frr:10.4.38745af1f9bbb
xz@5.8.1-r0
5.8.3-r0
2
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
xz@5.8.1-r0
5.8.3-r0
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
xz@5.6.1-r3
5.8.3-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
xz@5.8.1-r0
5.8.3-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
xz@5.8.2-r0
5.8.3-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
xz@5.8.1-r0
5.8.3-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
xz@5.6.3-r0
5.8.3-r0
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
xz-utils@5.4.1-1
5.4.1-1+deb12u1
2
1dev/server:11.9.0cd5b12fe5471
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
5200710/hadoop:3.2.3-java8092d3088a5fb
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm1
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm1
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
xz-utils@5.8.1-1
5.8.1-1+deb13u1
1
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
xz@5.6.3-r0
5.8.3-r0
1
abhinavsingh/proxy.py:latest51adc989fd03
xz@5.6.3-r0
5.8.3-r0
1
aboogie/login_test_backend:new9c41a4483ac8
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
actualbudget/actual-server:25.3.158fecd9088b7
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.3
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.3
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
aerospike/aerospike-kubernetes-operator:4.5.070a9eeb991b8
xz@1:5.6.2-4.el10_0
1:5.6.2-4.el10_2.1
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.1
1
aibrix/metadata-service:v0.7.063fb81a64377
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
airbyte/db:2.2.03b6985a0ce75
xz@5.8.1-r0
5.8.3-r0
1
airbyte/manifest-server:7.23.73b3a670af168
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
airbyte/pod-sweeper:1.5.198d2c39d512e
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm1
1
akaunting/akaunting:3.0.1552811b36ec3a
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
akeyless/base:latest759e4289fae8
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
xz@5.8.1-r0
5.8.3-r0
1
aktosecurity/data-ingestion-service213aded7adc5
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.3
1
alakaganaguathoork/local-business:latest7eb27b0f4a5a
xz@5.8.1-r0
5.8.3-r0
1
alazidis/stornx:1.1.1602d4f7f090c
xz-utils@5.4.1-1
5.4.1-1+deb12u1
1
allegroai/clearml:2.0.0-613713ae38f7daf
xz-utils@5.4.1-0.2
5.4.1-1+deb12u1
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm1
1
alpine/k8s:1.31.106dbe6f391eda
xz@5.8.1-r0
5.8.3-r0
1
alpine/k8s:1.31.137a319b15cfc9
xz@5.8.1-r0
5.8.3-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.