StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,264
of 17,790 indexed, latest versions
Container images
2,237
deployed by those charts
Fix available
2 of 2
affected packages

Security update for tar

Carried by container images the latest versions of 2,264 of 17,790 indexed charts deploy, on 2,237 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,231
tarrpm1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.16
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569cSUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,264 by stars
ChartLatestAffected imagesRadar Score
kubesendkubesend0.1.91 of 1See more

kubesend kubesend 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
v3xl/kubesend:0.1.06f62ca96be82
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,396
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

7,753
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,679
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

12,473
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

114,050
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,534
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,571
api-gatewaylabs64io-helm-chartsVerified publisher0.12.01 of 1See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
labs64/traefik-authproxy:0.0.3dfc6086dfbce
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,029
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,649
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,725
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,031
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

35,092
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

4,459
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,128
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

7,923
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

6,769
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

7,252
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,774
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-assure-identity:2.0.0147854a3c916
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-audit:2.0.079428add7f38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-binary-storage:2.0.053decadc102d
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-deployment:2.0.0ea8110886d38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-management-api:2.0.0b9a23345eabd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-voice-verifier:2.0.014170ad34903
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

71,268
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,112
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,416
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,752
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,072
magentomagento3.2.36 of 12See more

magento magento 3.2.3

6 of the 12 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/rabbitmq:4.1.0-management935b3f84c1e4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
library/redis:7.274566c6910d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
tar@1.34-150000.3.34.1
1.34-150000.3.42.1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
tar@1.34-150000.3.34.1
1.34-150000.3.42.1
longhornio/longhorn-ui:v1.10.0e60f36161511
tar@1.34-150000.3.34.1
1.34-150000.3.42.1

Open the chart page →

13,643
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

3,017
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

19,195
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,025
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,775
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

4,197
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
tar@1.35+dfsg-3.1build1
no fix listed

Open the chart page →

11,109
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,710
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

13,812
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed
library/redmine:6.1.204ac44a2595b
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,583
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,849
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,849
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,907
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

3,732
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,649
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

37,504
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,849
helm-composenousefreakVerified publisher0.1.32 of 2See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/wordpress:latest5a93c470ae82
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

14,363
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,062
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,849
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tar@1.34+dfsg-1.2
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

14,884
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

4,208
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,849
opentelemetry-demoopentelemetry-helmVerified publisher0.41.27 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

7 of the 34 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
tar@1.34+dfsg-1ubuntu0.1.22.04.4
1.34+dfsg-1ubuntu0.1.22.04.6
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

22,916
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,936
opikopikOfficialVerified publisher2.2.642 of 13See more

opik opik 2.2.64

2 of the 13 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

14,444
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
tar@1.34+dfsg-1ubuntu0.1.22.04.3
1.34+dfsg-1ubuntu0.1.22.04.6
shaowenchen/ops-server:latest315444f703f4
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

9,101

Container images carrying it

2,237 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/grycap/im:latest06a16d4f279f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/icoretech/codex-pooler:0.7.81bebc7e4a770
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.12ab6a6273755
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/itobey/playlist-mirror:1.0.0601082677a46
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
tar@1.29b-2ubuntu0.4
1.29b-2ubuntu0.4+esm4
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.