StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,264
of 17,792 indexed, latest versions
Container images
2,232
deployed by those charts
Fix available
2 of 2
affected packages

Security update for tar

Carried by container images the latest versions of 2,264 of 17,792 indexed charts deploy, on 2,232 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,226
tarrpm1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.16
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569cSUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,264 by stars
ChartLatestAffected imagesRadar Score
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,122
kubesendkubesend0.1.91 of 1See more

kubesend kubesend 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
v3xl/kubesend:0.1.06f62ca96be82
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,403
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

7,763
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,686
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

12,495
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

114,131
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,552
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,559
api-gatewaylabs64io-helm-chartsVerified publisher0.12.01 of 1See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
labs64/traefik-authproxy:0.0.3dfc6086dfbce
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,036
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,667
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,755
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,048
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

35,432
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

4,467
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,135
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

7,934
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

6,776
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

7,240
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,781
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-assure-identity:2.0.0147854a3c916
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-audit:2.0.079428add7f38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-binary-storage:2.0.053decadc102d
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-deployment:2.0.0ea8110886d38
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-management-api:2.0.0b9a23345eabd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
lumenvox/cloud-voice-verifier:2.0.014170ad34903
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

71,369
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,121
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,515
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,773
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,079
magentomagento3.2.36 of 12See more

magento magento 3.2.3

6 of the 12 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/rabbitmq:4.1.0-management935b3f84c1e4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
library/redis:7.274566c6910d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
tar@1.34-150000.3.34.1
1.34-150000.3.42.1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
tar@1.34-150000.3.34.1
1.34-150000.3.42.1
longhornio/longhorn-ui:v1.10.0e60f36161511
tar@1.34-150000.3.34.1
1.34-150000.3.42.1

Open the chart page →

13,685
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
tar@1.30+dfsg-7ubuntu0.20.04.4
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

3,026
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

19,206
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,053
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,788
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

4,221
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
tar@1.35+dfsg-3.1build1
no fix listed

Open the chart page →

11,106
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,717
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

13,819
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed
library/redmine:6.1.204ac44a2595b
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,617
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,907
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

3,738
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,667
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

37,538
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
helm-composenousefreakVerified publisher0.1.32 of 2See more

helm-compose nousefreak 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/wordpress:latest5a93c470ae82
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

14,398
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,079
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tar@1.34+dfsg-1.2
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

14,920
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

4,216
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,875
opentelemetry-demoopentelemetry-helmVerified publisher0.41.27 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

7 of the 34 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
tar@1.34+dfsg-1ubuntu0.1.22.04.4
1.34+dfsg-1ubuntu0.1.22.04.6
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

23,064
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,960
opikopikOfficialVerified publisher2.2.662 of 13See more

opik opik 2.2.66

2 of the 13 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

14,454

Container images carrying it

2,232 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
tar@1.35+dfsg-4
1.35+dfsg-4ubuntu0.4
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
tar@1.34+dfsg-1.2
no fix listed
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
ghcr.io/wekan/ferretdb:latest6cb94aa01999
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/wekan/wekan:v11.83137951e3fb40
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
tar@1.34+dfsg-1.2
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
tar@1.34+dfsg-1.2
no fix listed
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
tar@1.29b-2ubuntu0.3
1.29b-2ubuntu0.4+esm4
1
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/yourls/yourls:1.10.654082566391e
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0014ce435c77651e
tar@1.35+dfsg-3.1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.