StackRadar

CVE-2026-42250

Medium

Advisory

Published 28 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,389
of 17,787 indexed, latest versions
Container images
2,367
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-42250 affecting package bzip2 for versions less than 1.0.8-2

Carried by container images the latest versions of 2,389 of 17,787 indexed charts deploy, on 2,367 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-5, 1.0.6-8, 1.0.6-8.1, 1.0.6-8.1ubuntu0.2+11 more1.0.6-5ubuntu0.1~esm3, 1.0.6-8.1ubuntu0.2+esm1, 1.0.6-8ubuntu0.2+esm1, 1.0.8-2ubuntu0.1~esm1+4 more2,348
bzip2rpm1.0.8-1.azl3, 1.0.8-150400.1.1221.0.8-2, 1.0.8-150400.3.4.119
OSV records
DEBIAN-CVE-2026-42250UBUNTU-CVE-2026-42250AZL-88809ECHO-dfc7-0c27-52d8SUSE-SU-2026:4055-1
Also known as
USN-8685-1

Charts affected

2,389 by stars
ChartLatestAffected imagesRadar Score
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

113,791
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
bzip2@1.0.8-6
no fix listed

Open the chart page →

3,512
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,544
api-gatewaylabs64io-helm-chartsVerified publisher0.12.01 of 1See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
labs64/traefik-authproxy:0.0.3dfc6086dfbce
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,006
auditflowlabs64io-helm-chartsVerified publisher0.12.11 of 3See more

auditflow labs64io-helm-charts 0.12.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinnedc7b26d3ca11c
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1

Open the chart page →

1,446
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,626
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.02 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
labs64/payment-gateway:0.0.10c66feefca17
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1
library/postgres:184ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,657
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

3,980
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

5,576
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

35,050
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

4,418
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,099
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

7,874
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

6,761
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

7,201
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

2,757
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1

Open the chart page →

810
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-audit:2.0.079428add7f38
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-binary-storage:2.0.053decadc102d
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-deployment:2.0.0ea8110886d38
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

70,741
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

1,091
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,734
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

1,049
magentomagento3.2.36 of 12See more

magento magento 3.2.3

6 of the 12 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/rabbitmq:4.1.0-management935b3f84c1e4
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
library/redis:7.274566c6910d1
bzip2@1.0.8-5+b1
no fix listed
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
bzip2@1.0.8-150400.1.122
1.0.8-150400.3.4.1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
bzip2@1.0.8-150400.1.122
1.0.8-150400.3.4.1
longhornio/longhorn-ui:v1.10.0e60f36161511
bzip2@1.0.8-150400.1.122
1.0.8-150400.3.4.1

Open the chart page →

13,479
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1

Open the chart page →

2,975
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1

Open the chart page →

19,187
mcpmcp-chartsVerified publisher0.0.233 of 7See more

mcp mcp-charts 0.0.23

3 of the 7 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
bzip2@1.0.8-6
no fix listed
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
bzip2@1.0.8-6
no fix listed
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
bzip2@1.0.8-6build2
1.0.8-6ubuntu0.1

Open the chart page →

6,929
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,753
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

4,137
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
bzip2@1.0.8-6build1
no fix listed

Open the chart page →

11,103
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
bzip2@1.0.8-6
no fix listed

Open the chart page →

2,680
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

13,738
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
bzip2@1.0.8-6
no fix listed
library/redmine:6.1.204ac44a2595b
bzip2@1.0.8-6
no fix listed

Open the chart page →

7,527
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,827
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,827
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,879
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

3,689
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,626
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bzip2@1.0.8-5+b1
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
bzip2@1.0.8-5+b1
no fix listed
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
bzip2@1.0.8-5+b1
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
bzip2@1.0.8-5+b1
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

37,373
monitorneuvectorchartsVerified publisher2.11.11 of 1See more

monitor neuvectorcharts 2.11.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
neuvector/prometheus-exporter:1.0.181d78ed4eef40
bzip2@1.0.8-150400.1.122
1.0.8-150400.3.4.1

Open the chart page →

203
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,827
helm-composenousefreakVerified publisher0.1.32 of 2See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
library/wordpress:latest5a93c470ae82
bzip2@1.0.8-6
no fix listed

Open the chart page →

14,250
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,039
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
bzip2@1.0.8-6
no fix listed

Open the chart page →

1,827
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
bzip2@1.0.8-5+b1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

14,838
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

4,166
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

5,779
opentelemetry-demoopentelemetry-helmVerified publisher0.41.17 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

7 of the 34 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
bzip2@1.0.8-6
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
bzip2@1.0.8-6
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
bzip2@1.0.8-6
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
bzip2@1.0.8-6
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1

Open the chart page →

22,420
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
bzip2@1.0.8-5+b1
no fix listed

Open the chart page →

6,873
opikopikOfficialVerified publisher2.2.612See more

opik opik 2.2.61

2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
redis/redis-stack-server:7.2.0-v10e44b2b49d059
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

—
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-42250.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
shaowenchen/ops-server:latest315444f703f4
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1

Open the chart page →

8,939

Container images carrying it

2,367 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
bzip2@1.0.8-6
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
ghcr.io/dgtlmoon/changedetection.io:0.60.3:latestecacd9fd0c66
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
bzip2@1.0.8-6
no fix listed
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bzip2@1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2+esm1
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
bzip2@1.0.8-5+b1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
bzip2@1.0.8-5+b1
no fix listed
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
bzip2@1.0.8-6
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
quay.io/cilium/cilium-envoy:v1.37.5-1786810558-766ccfb37260a43e9d228837aa84ce3faf9f64e775b8094c7127
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
bzip2@1.0.8-5+b1
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
bzip2@1.0.8-5+b1
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
bzip2@1.0.6-8.1
1.0.6-8.1ubuntu0.2+esm1
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
bzip2@1.0.8-6
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
bzip2@1.0.8-5+b1
no fix listed
1
actualbudget/actual-server:25.3.158fecd9088b7
bzip2@1.0.8-5+b1
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
bzip2@1.0.8-5.1build0.1
1.0.8-5.1ubuntu0.1
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
bzip2@1.0.8-5.1
1.0.8-5.1ubuntu0.1
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
bzip2@1.0.8-2
1.0.8-2ubuntu0.1~esm1
1
agentarea/agentarea-api:latest9e15e16fa758
bzip2@1.0.8-6
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
bzip2@1.0.8-5+b1
no fix listed
1
agentarea/agentarea-worker:latest1e5cb68ee77a
bzip2@1.0.8-6
no fix listed
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
bzip2@1.0.8-5build1
1.0.8-5ubuntu0.1
1
aibrix/metadata-service:v0.7.063fb81a64377
bzip2@1.0.8-5+b1
no fix listed
1
airbyte/manifest-server:7.23.73b3a670af168
bzip2@1.0.8-5+b1
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
bzip2@1.0.8-5+b1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.