StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,397
of 17,792 indexed, latest versions
Container images
2,383
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,397 of 17,792 indexed charts deploy, on 2,383 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,370
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,397 by stars
ChartLatestAffected imagesRadar Score
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,665
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

49,501
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

15,820
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,861
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

3,381
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
bzip2@1.0.8-5.1
1.0.8-5.1ubuntu0.1

Open the chart page →

8,012
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

4,687
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
library/mongo:85211c51171f5
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

5,366
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,229
routergroundcover1.12.3702 of 7See more

router groundcover 1.12.370

2 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
bzip2@1.0.8-6
1.0.8-6+e1

Open the chart page →

5,531
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,308
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,723
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

9,434
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,707
hatchet-hahatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
bzip2@1.0.8-5+b1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
bzip2@1.0.8-5+b1
no fix listed
library/postgres:latest4ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

7,447
hatchet-stackhatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
bzip2@1.0.8-5+b1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
bzip2@1.0.8-5+b1
no fix listed
library/postgres:latest4ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

7,447
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

9,233
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,861
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

6,758
heliconehelicone0.1.423 of 14See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

25,250
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,696
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,861
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,880
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

10,730
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,715
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

20,262
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,018
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,835
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

24,205
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

4,609
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,319
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,824
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,470
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,332
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,861
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,715
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,861
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

9,165
affinehelmforgeVerified publisher1.0.03 of 3See more

affine helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
bzip2@1.0.8-6
no fix listed
pgvector/pgvector:0.8.6-pg16-bookwormccc6e83d6e35
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,115
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,132
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/httpd:2.4.68979c38c2228d
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,715
appwritehelmforgeVerified publisher2.0.02 of 5See more

appwrite helmforge 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
appwrite/new:1.1.96-self-hostedaf65a77db50e
bzip2@1.0.8-6
no fix listed
library/redis:8.10.1298e5b3bc566
bzip2@1.0.8-6
no fix listed

Open the chart page →

4,717
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

7,666
automatischhelmforgeVerified publisher1.3.72 of 4See more

automatisch helmforge 1.3.7

2 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
bzip2@1.0.8-6
no fix listed
library/redis:8.10.1298e5b3bc566
bzip2@1.0.8-6
no fix listed

Open the chart page →

5,843
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

2,343
castopodhelmforgeVerified publisher1.2.72 of 3See more

castopod helmforge 1.2.7

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
bzip2@1.0.8-6
no fix listed
library/mariadb:12.3.3dd9b303aed4f
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

9,524
changedetectionhelmforgeVerified publisher1.1.161 of 1See more

changedetection helmforge 1.1.16

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,630
chiefonboardinghelmforgeVerified publisher1.1.152 of 3See more

chiefonboarding helmforge 1.1.15

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
bzip2@1.0.8-6
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

7,209
ckanhelmforgeVerified publisher1.3.84 of 6See more

ckan helmforge 1.3.8

4 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
bzip2@1.0.8-5+b1
no fix listed
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
library/postgres:18.6-trixie4ef4dbc939d6
bzip2@1.0.8-6
no fix listed
library/redis:8.10.1298e5b3bc566
bzip2@1.0.8-6
no fix listed

Open the chart page →

10,064
countlyhelmforgeVerified publisher1.2.62 of 3See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/mongo:8.3.85211c51171f5
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

18,967

Container images carrying it

2,383 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
bzip2@1.0.8-5+b1
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
bzip2@1.0.8-5+b1
no fix listed
1
spy86/rabbitmq-stomp:latestea649101b9fb
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
sslhep/servicex_app:v1.8.51d12f943cec5
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
bzip2@1.0.8-6
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
bzip2@1.0.8-6
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2api:3.86f56d239d280
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2auth:3.833ecfda16608
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2notifier:3.8f190a6212195
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2rulesengine:3.8259503496ff9
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2scheduler:3.8b1de2055c362
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2stream:3.81c8904a3bf67
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2timersengine:3.81bf35bfaf00c
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2web:3.809989a26c8b7
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stackstorm/st2workflowengine:3.819fdfffdbba8
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stalwartlabs/stalwart:v0.16.1425001929f36a
bzip2@1.0.8-6
no fix listed
1
stalwartlabs/stalwart:v0.16.22388dcb75a707
bzip2@1.0.8-6
no fix listed
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
bzip2@1.0.8-6
no fix listed
1
stalwartlabs/stalwart:v0.15.5dcf575db2d53
bzip2@1.0.8-6
no fix listed
1
stashapp/stash:latest24dbd7607174
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
stashapp/stash-box:latesta534c8afdf39
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
statcan/ckan:2.93921305425b8
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
bzip2@1.0.8-5+b1
no fix listed
1
steamcmd/steamcmd:latest5028a25268e7
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
strangebee/thehive:5.8.0-1a7f7b05fba24
bzip2@1.0.8-5+b1
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
structurizr/onpremises:2025.11.094b5ffb5119c8
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
bzip2@1.0.8-5+b1
no fix listed
1
supabase/edge-runtime:v1.74.02781daf92394
bzip2@1.0.8-5+b1
no fix listed
1
supabase/edge-runtime:v1.59.0eff9c554d649
bzip2@1.0.8-5+b1
no fix listed
1
supabase/logflare:latest49bfe526f1b4
bzip2@1.0.8-6
no fix listed
1
supabase/postgres-meta:v0.96.6a84cc713585e
bzip2@1.0.8-5+b1
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
bzip2@1.0.8-5+b1
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
bzip2@1.0.8-5+b1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.