StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,298
of 17,821 indexed, latest versions
Container images
2,273
deployed by those charts
Fix available
2 of 2
affected packages

tar-1.35-8.1 on GA media

Carried by container images the latest versions of 2,298 of 17,821 indexed charts deploy, on 2,273 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,266
tarrpm1.30-lp152.3.6, 1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.1, 1.35-8.17
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569copenSUSE-SU-2026:11125-1SUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,298 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,273 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sirrend/helmup-notifications-service:0.1.3997866417011
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
tar@1.29b-2
1.29b-2ubuntu0.4+esm4
1
sissbruecker/linkding:1.35.00c5dddf0b37c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sissbruecker/linkding:1.47.0e35cb50e0581
tar@1.35+dfsg-3.1
no fix listed
1
slagattollas/weatherservice-practica:latest68e7f56393fc
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4
1
snipe/snipe-it:v8.3.1141ebf2386fe
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
snipe/snipe-it:v6.0.1455fb7636a98c
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
tar@1.30+dfsg-7ubuntu0.20.04.3
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
tar@1.29b-2ubuntu0.3
1.29b-2ubuntu0.4+esm4
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
tar@1.34+dfsg-1.2
no fix listed
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
tar@1.29b-2ubuntu0.3
1.29b-2ubuntu0.4+esm4
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
tar@1.34+dfsg-1.2
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
tar@1.34+dfsg-1.2
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
tar@1.34+dfsg-1.2
no fix listed
1
softwaremill/bootzooka:latest845b5e8f8056
tar@1.35+dfsg-4
1.35+dfsg-4ubuntu0.4
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
somnathmore/custom-nginx:v2bdfc06cad4ec
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/bobby-api:latestfe534731909a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/garge-app:v1.20.70382ebf9dfc8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/nstuning-app:v1.6.113a6795bf36da
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/pyttogpanne-app:v1.0.0ef6ee3d8912c
tar@1.35+dfsg-3.1
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
tar@1.35+dfsg-3.1
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
tar@1.34+dfsg-1.2
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
tar@1.34+dfsg-1.2
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
splatform/stratos-mariadb:4.4.0-bc65c315c28560b598108
tar@1.30-lp152.3.6
1.35-8.1
1
spy86/rabbitmq-stomp:latestea649101b9fb
tar@1.30+dfsg-7ubuntu0.20.04.3
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
sslhep/servicex_app:v1.8.51d12f943cec5
tar@1.35+dfsg-3.1
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
tar@1.35+dfsg-3.1
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
tar@1.35+dfsg-3.1
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
tar@1.35+dfsg-3.1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.