StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,434
of 17,805 indexed, latest versions
Container images
2,410
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,434 of 17,805 indexed charts deploy, on 2,410 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,397
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.113
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,434 by stars
ChartLatestAffected imagesRadar Score
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,014
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e13 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

16,591
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb3 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

16,624
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f83 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

14,849
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091143 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

16,624
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4693 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

14,392
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3413 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

14,392
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b23 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

3 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

16,242
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef2 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

2 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
bzip2@1.0.8-5+b1
no fix listed
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

15,842
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

11,283
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

1,848
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

51,180
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

66,163
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm74566c6910d1
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

1,883
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

2,333
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,532
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,616
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

20,279
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
bzip2@1.0.8-6
no fix listed
ncsa/checks:main0b738bbc8d70
bzip2@1.0.8-6
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
bzip2@1.0.8-6
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
bzip2@1.0.8-6
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
bzip2@1.0.8-6
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
bzip2@1.0.8-6
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
bzip2@1.0.8-6
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
bzip2@1.0.8-6
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
bzip2@1.0.8-6
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
bzip2@1.0.8-6
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
bzip2@1.0.8-6
no fix listed

Open the chart page →

69,027
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,545
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

20,381
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,998
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

2,043
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

4,116
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

2,100
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

6,609
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

2,039
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

7,035
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

3,245
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,507
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,446
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,057
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
bzip2@1.0.8-6
no fix listed

Open the chart page →

4,358
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

14,627
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

13,937
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

13,678
steadybit-agentsteadybit3.1.1683 of 6See more

steadybit-agent steadybit 3.1.168

3 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
bzip2@1.0.8-6
no fix listed
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
bzip2@1.0.8-6
no fix listed
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
bzip2@1.0.8-6
no fix listed

Open the chart page →

3,812
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

20,279
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,528
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,885
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

66,712
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,193
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

12,792
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

12,792
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,581
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

2,626
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
bzip2@1.0.8-6
no fix listed

Open the chart page →

3,060
substra-backendsubstraVerified publisher26.15.32 of 7See more

substra-backend substra 26.15.3

2 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
bzip2@1.0.8-6
no fix listed
ghcr.io/substra/substra-backend:1.0.121967f54ec86
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

4,862
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,033
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

13,546

Container images carrying it

2,410 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
bzip2@1.0.8-6
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
bzip2@1.0.8-6
no fix listed
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
bzip2@1.0.8-6
no fix listed
1
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
bzip2@1.0.8-6
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
ghcr.io/kubelauncher/cassandrab66aba320083
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/etcd8ab954711fb9
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/kubectl7280594a2f18
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/mariadbe25056a6ec52
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/memcachedb599ca6b3ff3
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/mongodb9bc37ed78a8b
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/mysqle9609bd50416
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/openldap8978aa002bc0
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/rabbitmqff5a36a457f1
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
ghcr.io/kubelauncher/redisbcd8e9a6224f
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubelauncher/zookeeper7826e9caa461
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
1
ghcr.io/kubenetworks/kubevpn:v2.11.93feb9da85270
bzip2@1.0.8-5+b1
no fix listed
1
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
bzip2@1.0.8-6
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
bzip2@1.0.8-6
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.