StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,240
of 17,787 indexed, latest versions
Container images
2,202
deployed by those charts
Fix available
2 of 2
affected packages

Security update for tar

Carried by container images the latest versions of 2,240 of 17,787 indexed charts deploy, on 2,202 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,196
tarrpm1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.16
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569cSUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,240 by stars
ChartLatestAffected imagesRadar Score
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,544
api-gatewaylabs64io-helm-chartsVerified publisher0.12.01 of 1See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
labs64/traefik-authproxy:0.0.3dfc6086dfbce
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,006
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,626
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,657
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,980
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

35,050
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

4,418
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,099
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

7,874
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

6,761
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

7,201
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,757
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-assure-identity:2.0.0147854a3c916
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-audit:2.0.079428add7f38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-binary-storage:2.0.053decadc102d
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-deployment:2.0.0ea8110886d38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-management-api:2.0.0b9a23345eabd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-voice-verifier:2.0.014170ad34903
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

70,741
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,091
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,734
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,049
magentomagento3.2.36 of 12See more

magento magento 3.2.3

6 of the 12 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/rabbitmq:4.1.0-management935b3f84c1e4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
library/redis:7.274566c6910d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
tar@1.34-150000.3.34.1
1.34-150000.3.42.1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
tar@1.34-150000.3.34.1
1.34-150000.3.42.1
longhornio/longhorn-ui:v1.10.0e60f36161511
tar@1.34-150000.3.34.1
1.34-150000.3.42.1

Open the chart page →

13,479
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

2,975
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

19,187
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,929
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,753
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

4,137
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
tar@1.35+dfsg-3.1build1
no fix listed

Open the chart page →

11,103
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,680
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

13,738
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed
library/redmine:6.1.204ac44a2595b
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,527
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,827
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,827
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,879
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

3,689
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,626
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

37,373
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,827
helm-composenousefreakVerified publisher0.1.32 of 2See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/wordpress:latest5a93c470ae82
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

14,250
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,039
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,827
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tar@1.34+dfsg-1.2
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

14,838
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

4,166
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,779
opentelemetry-demoopentelemetry-helmVerified publisher0.41.17 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

7 of the 34 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
tar@1.34+dfsg-1ubuntu0.1.22.04.4
1.34+dfsg-1ubuntu0.1.22.04.6
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

22,420
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,873
opikopikOfficialVerified publisher2.2.612See more

opik opik 2.2.61

2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

—
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
tar@1.34+dfsg-1ubuntu0.1.22.04.3
1.34+dfsg-1ubuntu0.1.22.04.6
shaowenchen/ops-server:latest315444f703f4
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

8,939
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,681
paperless-ngxpaperlessVerified publisher0.4.03 of 3See more

paperless-ngx paperless 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
tar@1.34+dfsg-1.2+deb12u1
no fix listed
valkey/valkey:9.0.54c64dfeae602
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

8,489
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,883
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4

Open the chart page →

4,727
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,035
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

7,576

Container images carrying it

2,202 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ilum/marquez:0.54.06e1d709d41f8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
tar@1.35+dfsg-3.1
no fix listed
2
interlayhq/interbtc:latesta66d0e35e70f
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
2
iomesh/node-disk-exporter:1.8.0f03148764f38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
2
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4
2
istio/proxyv2:1.18.0757d28c24100
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6
2
istio/proxyv2:1.10.3a78b7a165744
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
tar@1.34+dfsg-1.2
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
tar@1.35+dfsg-3.1
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
2
langgenius/dify-sandbox:0.2.009b7e8705673
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/buildpack-deps:curl04907bdd423b
tar@1.35+dfsg-3.1
no fix listed
2
library/cassandra:3.11.65aa8400b4b3b
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4
2
library/cassandra:4.1.37cbcec0086ac
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
2
library/debian:stable-slim04634311a8d5
tar@1.35+dfsg-3.1
no fix listed
2
library/elasticsearch:7.17.35e6ac15bf6a5
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
2
library/elasticsearch:8.19.1289729a95066a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
2
library/ghost:6.63.0e05bc1169fb2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/haproxy:3.2de601ccc9a79
tar@1.35+dfsg-3.1
no fix listed
2
library/influxdb:2.7b8d940ca9376
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/mariadb:10.8.30abf60f81588
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6
2
library/mariadb:10.10334b315c10e5
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
2
library/mariadb:12.0.2:12.0-noble607835cd628b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
2
library/mariadb:11.3.2e101f9db3191
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
2
library/mongo:8.0.20098862b1339f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
2
library/mongo:5.041108d183e97
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
2
library/mongo:4.2.358b25d51baa1
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
tar@1.35+dfsg-3.1
no fix listed
2
library/nginx:latest6e23479198b9
tar@1.35+dfsg-3.1
no fix listed
2
library/nginx:1.27.098f8ec75657d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/nginx:1.29.49dd288848f44
tar@1.35+dfsg-3.1
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/postgres:17-bookworm051f7b7b3abd
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/postgres:16.109f23e02d766
tar@1.34+dfsg-1.2
no fix listed
2
library/postgres:18.11090bc3a8ccf
tar@1.35+dfsg-3.1
no fix listed
2
library/postgres:16.24aea012537ed
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/postgres:18.06f3e42ad37de
tar@1.35+dfsg-3.1
no fix listed
2
library/postgres:16.4e62fbf9d3e2b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
2
library/python:3.14-slim:3-slimcad9a2c87176
tar@1.35+dfsg-3.1
no fix listed
2
library/python:3.7eedf63967cdb
tar@1.34+dfsg-1.2
no fix listed
2
library/rabbitmq:4.1.0-management935b3f84c1e4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
2
library/rabbitmq:3.12.1-managementf020c06da226
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6
2
library/redis:7.2.3a7cee7c8178f
tar@1.34+dfsg-1.2
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.