StackRadar

CVE-2026-4111

High

Advisory

Published 13 Mar 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
105
of 17,781 indexed, latest versions
Container images
126
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libarchive security update

Carried by container images the latest versions of 105 of 17,781 indexed charts deploy, on 126 images.

Affected packageAffected versionsFixed inImages
libarchiverpm3.5.3-3.el9, 3.5.3-4.el9, 3.5.3-4.el9.0.1, 3.5.3-5.el9_6+2 more0:3.5.3-7.el9_7, 0:3.7.7-5.el10_193
libarchivedeb3.1.2-11ubuntu0.16.04.3, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2, 3.4.0-2ubuntu1.5+11 more3.1.2-11ubuntu0.16.04.8+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.6.2-1+deb12u4+3 more33
OSV records
DEBIAN-CVE-2026-4111RHSA-2026:5063RHSA-2026:5080RLSA-2026:5080UBUNTU-CVE-2026-4111
Also known as
RHSA-2026:6647, RHSA-2026:7105, RHSA-2026:7106, USN-8147-1

Charts affected

105 by stars
ChartLatestAffected imagesRadar Score
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libarchive@3.7.2-2ubuntu0.5
3.7.2-2ubuntu0.6

Open the chart page →

19,391
mssqlmssqlVerified publisher1.10.31 of 1See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
libarchive@3.7.7-4.el10_0
0:3.7.7-5.el10_1

Open the chart page →

642
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

6,328
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

7,450
hpe-cosi-driverhpe-storageVerified publisher2.0.01 of 2See more

hpe-cosi-driver hpe-storage 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

1,648
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,145
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
libarchive@3.4.0-2ubuntu1.5
3.4.0-2ubuntu1.5+esm1

Open the chart page →

11,582
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

6,328
seldon-core-operatorseldon1.19.01 of 1See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

841
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

1,819
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libarchive@3.7.4-4
3.7.4-4+deb13u1

Open the chart page →

12,037
cockroachdb-operator-chartcockroachdbv21.0.01 of 1See more

cockroachdb-operator-chart cockroachdbv2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
cockroachdb/cockroachdb-operator-v2:v1.0.04335d8bcbd3d
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

825
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,864
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libarchive@3.6.2-1+deb12u1
3.6.2-1+deb12u4

Open the chart page →

13,761
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
libarchive@3.5.3-5.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,828
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libarchive@3.6.2-1+deb12u1
3.6.2-1+deb12u4

Open the chart page →

11,458
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5+esm1

Open the chart page →

35,305
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
haveagitgat/tdarr_node:2.00.101e3f9328327d
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5+esm1

Open the chart page →

31,000
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.42 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

2 of the 7 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

6,095
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

12,019
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
libarchive@3.7.7-0ubuntu3
3.7.7-0ubuntu3.1

Open the chart page →

11,103
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.31 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

1 of the 5 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

6,091
opencveopencve1.2.01 of 3See more

opencve opencve 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
cleveritcz/opencve:1.5.0c75c1636e0b7
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

2,097
patch-operatorpatch-operator0.1.111 of 2See more

patch-operator patch-operator 0.1.11

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

7,807
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

9,837
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
libarchive@3.6.2-1+deb12u3
3.6.2-1+deb12u4

Open the chart page →

7,740
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1

Open the chart page →

6,817
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1

Open the chart page →

26,657
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5+esm1

Open the chart page →

25,443
adeptia-automate-mcpadeptia-automate-mcp1.0.01 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
libarchive@3.7.7-4.el10_0
0:3.7.7-5.el10_1

Open the chart page →

3,600
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

4,777
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafkadigest-pinnedd20bd62f0182
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

3,217
akto-mrs-runtime-combinedakto0.0.21 of 2See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,826
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5+esm1

Open the chart page →

42,126
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

2,902
cluster-manager-hubappscodeVerified publisher2026.2.161 of 1See more

cluster-manager-hub appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,038
managed-serviceaccount-managerappscodeVerified publisher2026.2.161 of 1See more

managed-serviceaccount-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

894
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
3.6.2-1+deb12u4

Open the chart page →

9,412
keycloak-mcp-serverchristianhuthVerified publisher1.2.01 of 1See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7

Open the chart page →

1,423
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libarchive@3.1.2-11ubuntu0.16.04.3
3.1.2-11ubuntu0.16.04.8+esm2

Open the chart page →

33,963
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
libarchive@3.5.3-5.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,797
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
razzy10/product-service:latest702e411956db
libarchive@3.5.3-5.el9_6
0:3.5.3-7.el9_7

Open the chart page →

3,547
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
libarchive@3.5.3-4.el9.0.1
0:3.5.3-7.el9_7

Open the chart page →

3,191
prometheus-dellhw-exporterdellhw-exporterVerified publisher1.3.01 of 1See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,812
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libarchive@3.7.2-2ubuntu0.1
3.7.2-2ubuntu0.6

Open the chart page →

16,954
doris-foundationdbdorisVerified publisher25.8.01 of 4See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
libarchive@3.5.3-4.el9.0.1
0:3.5.3-7.el9_7

Open the chart page →

3,167
drogue-cloud-coredrogue-iotVerified publisher0.7.1118 of 22See more

drogue-cloud-core drogue-iot 0.7.11

18 of the 22 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7

Open the chart page →

55,666
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7

Open the chart page →

2,942
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libarchive@3.4.0-2ubuntu1.5
3.4.0-2ubuntu1.5+esm1

Open the chart page →

64,489
trusted-issuers-listfiware0.18.71 of 1See more

trusted-issuers-list fiware 0.18.7

1 of the 1 container images this version deploys carry CVE-2026-4111.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
libarchive@3.5.3-5.el9_6
0:3.5.3-7.el9_7

Open the chart page →

1,701

Container images carrying it

126 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
libarchive@3.5.3-3.el9
0:3.5.3-7.el9_7
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
libarchive@3.5.3-5.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libarchive@3.6.2-1+deb12u1
3.6.2-1+deb12u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libarchive@3.7.4-4
3.7.4-4+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libarchive@3.7.4-4
3.7.4-4+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libarchive@3.7.4-4
3.7.4-4+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
3.6.2-1+deb12u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libarchive@3.7.4-4
3.7.4-4+deb13u1
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5+esm1
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
libarchive@3.5.3-6.el9_6
0:3.5.3-7.el9_7
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
libarchive@3.5.3-4.el9
0:3.5.3-7.el9_7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.