CVE-2026-5704
MediumAdvisory
Published 6 Apr 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 34th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,343
- of 17,828 indexed, latest versions
- Container images
- 2,333
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
tar-1.35-8.1 on GA media
Carried by container images the latest versions of 2,343 of 17,828 indexed charts deploy, on 2,333 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| tardeb | 1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more | 1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more | 2,326 |
| tarrpm | 1.30-lp152.3.6, 1.34-150000.3.34.1, 1.34-150000.3.37.1 | 1.34-150000.3.42.1, 1.35-8.1 | 7 |
- OSV records
- DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569copenSUSE-SU-2026:11125-1SUSE-SU-2026:2714-1
- Also known as
- USN-8477-1, USN-8477-2, USN-8477-3
Charts affected
2,343 by stars
Container images carrying it
2,333 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| geoservercloud/ | 756559ee788a | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| geoservercloud/ | 99540eef78ad | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| geoservercloud/ | 5c254c53a357 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| geoservercloud/ | c687b1cbc891 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| geoservercloud/ | 5288f320cf36 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| geoservercloud/ | a30a60ac6cd0 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| gjeanmart/ | 926264c8f2d1 | tar | no fix listed | 2 |
| gotenberg/ | 87c16b9f3642 | tar | no fix listed | 2 |
| gotenberg/ | f29984bd1e22 | tar | no fix listed | 2 |
| gradiant/ | 015b30d5fa0f | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | 2 |
| grafana/ | 7790f6f7fbd8 | tar | 1.35+dfsg-3ubuntu0.4 | 2 |
| grafana/ | f94b1c82957a | tar | 1.35+dfsg-3ubuntu0.4 | 2 |
| graviteeio/ | 8f1a14449381 | tar | no fix listed | 2 |
| graviteeio/ | d30d085395ca | tar | no fix listed | 2 |
| hjacobs/ | 4b2147f47425 | tar | no fix listed | 2 |
| honestica/ | a393242fb939 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| hookiesolutions/ | 0629694246ba | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| hyperledger/ | a674d35eec9a | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| ilum/ | 624fd09528c8 | tar | no fix listed | 2 |
| ilum/ | 6e1d709d41f8 | tar | no fix listed | 2 |
| interlayhq/ | a66d0e35e70f | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| interlayhq/ | c3e311de67da | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| iomesh/ | f03148764f38 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| istio/ | 40e8aba77c1b | tar | 1.28-2.1ubuntu0.2+esm6 | 2 |
| istio/ | ee156b8aefd6 | tar | 1.28-2.1ubuntu0.2+esm6 | 2 |
| istio/ | e86d247b7ac2 | tar | 1.28-2.1ubuntu0.2+esm6 | 2 |
| istio/ | eab80bcd2132 | tar | 1.28-2.1ubuntu0.2+esm6 | 2 |
| istio/ | 1e37fca43550 | tar | 1.28-2.1ubuntu0.2+esm6 | 2 |
| istio/ | e454cab754cf | tar | 1.28-2.1ubuntu0.2+esm6 | 2 |
| istio/ | 757d28c24100 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | 2 |
| istio/ | a78b7a165744 | tar | 1.29b-2ubuntu0.4+esm4 | 2 |
| jenkins/ | b470bcdc4ecd | tar | no fix listed | 2 |
| jenkins/ | c4098086090c | tar | no fix listed | 2 |
| juicedata/ | f918e7331c05 | tar | no fix listed | 2 |
| kurento/ | 03c0d34d0828 | tar | 1.35+dfsg-3ubuntu0.4 | 2 |
| langgenius/ | 09b7e8705673 | tar | no fix listed | 2 |
| library/ | 5aa8400b4b3b | tar | 1.29b-2ubuntu0.4+esm4 | 2 |
| library/ | 7cbcec0086ac | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | 2 |
| library/ | 5e6ac15bf6a5 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |
| library/ | 89729a95066a | tar | 1.35+dfsg-3ubuntu0.4 | 2 |
| library/ | a31d03f1f629 | tar | no fix listed | 2 |
| library/ | 979c38c2228d | tar | no fix listed | 2 |
| library/ | b8d940ca9376 | tar | no fix listed | 2 |
| library/ | 0abf60f81588 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | 2 |
| library/ | 334b315c10e5 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | 2 |
| library/ | 607835cd628b | tar | 1.35+dfsg-3ubuntu0.4 | 2 |
| library/ | e101f9db3191 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | 2 |
| library/ | d956c0a57fd7 | tar | no fix listed | 2 |
| library/ | 098862b1339f | tar | 1.35+dfsg-3ubuntu0.4 | 2 |
| library/ | 41108d183e97 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 | 2 |