StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,264
of 17,790 indexed, latest versions
Container images
2,237
deployed by those charts
Fix available
2 of 2
affected packages

Security update for tar

Carried by container images the latest versions of 2,264 of 17,790 indexed charts deploy, on 2,237 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,231
tarrpm1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.16
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569cSUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,264 by stars
ChartLatestAffected imagesRadar Score
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

18,881
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

6,184
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

6,035
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

22,445
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

6,230
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

24,375
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

2,169
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

15,861
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

20,242
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

10,163
dbgatedbgate-helm-chartVerified publisher0.1.81 of 1See more

dbgate dbgate-helm-chart 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.3f2dc7423ea88
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,419
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

20,242
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
decisionrules/ai-engine:latest38c377e7c01e
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,708
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
defactops/defactops-backend:1.0.2307b663c0092a
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,538
airtraildefault-ghVerified publisher0.2.21 of 2See more

airtrail default-gh 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
johly/airtrail:v3.11.19f702b91e0e7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,685
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

4,849
defguard-gatewaydefguard2.1.01 of 1See more

defguard-gateway defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

968
defguard-proxydefguard2.1.01 of 1See more

defguard-proxy defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

829
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,005
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,092
technitiumdeimosfr-charts15.4.01 of 1See more

technitium deimosfr-charts 15.4.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

1,231
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,328
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

2,566
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,849
challengedeneme0.1.02 of 2See more

challenge deneme 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed
library/redis:6143f7bfc2358
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,721
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
tar@1.30+dfsg-7ubuntu0.20.04.3
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

7,254
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

8,149
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
tar@1.30+dfsg-7ubuntu0.20.04.3
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

14,920
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6
ghcr.io/codingducksrl/laravel:8.15be52524664c
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

30,156
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6
ghcr.io/codingducksrl/laravel:8.15be52524664c
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

29,157
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

13,039
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

9,685
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

13,011
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

4,690
devtron-enterprisedevtron48.0.08 of 28See more

devtron-enterprise devtron 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
tar@1.34+dfsg-1.2
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
tar@1.28-2.1ubuntu0.2
1.28-2.1ubuntu0.2+esm6
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

68,695
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

4,972
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

11,959
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,908
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

9,685
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

13,011
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

4,690
devtron-enterprisedevtron-labs48.0.08 of 28See more

devtron-enterprise devtron-labs 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
tar@1.34+dfsg-1.2
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
tar@1.28-2.1ubuntu0.2
1.28-2.1ubuntu0.2+esm6
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

68,695
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

4,972
devtron-operatordevtron-labs0.23.35 of 11See more

devtron-operator devtron-labs 0.23.3

5 of the 11 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
tar@1.34+dfsg-1.2
no fix listed
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
quay.io/devtron/postgres:14.91b594392f7cb
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

33,180
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

11,959
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,908
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.03 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4

Open the chart page →

27,620
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,064
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
tar@1.34+dfsg-1.2+deb12u1
no fix listed
langgenius/dify-sandbox:0.2.009b7e8705673
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

19,399
pagesdipak1.0.02 of 3See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

20,242

Container images carrying it

2,237 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
janzo83/serviceexample:latestfb3c4ac36f3e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jedi132000/nextapp:latestdc2a81e92f23
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
jellyfin/jellyfin:10.11.81694ff069f0c
tar@1.35+dfsg-3.1
no fix listed
1
jellyfin/jellyfin:10.11.717285f9cce63
tar@1.35+dfsg-3.1
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
tar@1.35+dfsg-3.1
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jertel/elastalert2:2.31.03cbf63f9b7dc
tar@1.35+dfsg-3.1
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
1
jodogne/orthanc-plugins:latest6ff510aa29c2
tar@1.35+dfsg-3.1
no fix listed
1
johly/airtrail:v3.11.19f702b91e0e7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
joplin/server:latest3f7b852959aa
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6
1
journeyapps/powersync-service:latestbf46f66e5dcc
tar@1.35+dfsg-3.1
no fix listed
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tar@1.30+dfsg-7
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tar@1.30+dfsg-7
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
kayrosuno/kping:latestf3bd44b29b0d
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
kennethreitz/httpbin:latest599fe5e50731
tar@1.29b-2
1.29b-2ubuntu0.4+esm4
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
kimai/kimai2:2.67.03084f1e5ecdc
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
tar@1.35+dfsg-3.1
no fix listed
1
kixote/typemill4e9dff179519
tar@1.35+dfsg-3.1
no fix listed
1
kixote/typemill628f79a08cc7
tar@1.35+dfsg-3.1
no fix listed
1
knspar/phronetis:0.1.4609499d2dc91a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
knspar/phronetis-operator:0.1.60c4f0543ee58
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kong/httpbin:latesta6ac46531193
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
kong/kong:3.9.16addf50e6bd8
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
tar@1.30+dfsg-7ubuntu0.20.04.3
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
krontechnology/aapm-service:1.1.39dd602db8baa
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
kserve/models-web-app:v0.13.073486345a602
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.