StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,297
of 17,828 indexed, latest versions
Container images
2,280
deployed by those charts
Fix available
2 of 2
affected packages

tar-1.35-8.1 on GA media

Carried by container images the latest versions of 2,297 of 17,828 indexed charts deploy, on 2,280 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,273
tarrpm1.30-lp152.3.6, 1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.1, 1.35-8.17
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569copenSUSE-SU-2026:11125-1SUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,297 by stars
ChartLatestAffected imagesRadar Score
videoaugmentationassist-iot-video-augmentation0.1.02 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
tar@1.30+dfsg-7ubuntu0.20.04.3
1.30+dfsg-7ubuntu0.20.04.4+esm3
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

77,444
account-monitorastria0.0.11 of 1See more

account-monitor astria 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,987
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

32,881
auctioneerastria0.0.21 of 1See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,236
evm-bridge-withdrawerastria1.0.61 of 1See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,212
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,049
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,049
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,893
graph-nodeastria0.2.22 of 3See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
graphprotocol/graph-node:latestb0436347fb24
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/postgres:latest86c951e05bf5
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

5,564
hermesastria0.7.11 of 1See more

hermes astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

2,021
hyperlane-agentsastria0.1.41 of 2See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

2,561
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,517
sequencer-relayerastria2.0.01 of 1See more

sequencer-relayer astria 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,987
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

9,501
autopushautopushVerified publisher0.0.493 of 4See more

autopush autopush 0.0.49

3 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,094
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

6,981
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

6,393
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

5,935
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
kuzwolka/aws9:news3e8880fbbb96
tar@1.34+dfsg-1.2+deb12u1
no fix listed
kuzwolka/aws9:blog4a7707410bf1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
kuzwolka/aws9:shop84a9d9766345
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

18,724
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,006
azp-agentazp-agent1.2.01 of 1See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
cheveo/azp-agent:1.0.282240f890884
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

3,333
ragflowbaboulinet0.1.12 of 5See more

ragflow baboulinet 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
infiniflow/infinity:v0.7.0992c87a68612
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
valkey/valkey:83fbd2e3e4b6e
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,089
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,724
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

6,311
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

20,884
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,887
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

4,015
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,249
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
fosrl/pangolin:latest83a55f933b4d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,958
immichbear0.1.12 of 2See more

immich bear 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,690
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/redis:771da9275c5f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,702
webappbenc-uk1.4.31 of 1See more

webapp benc-uk 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latestcfb8a89ac237
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,593
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

20,287
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6

Open the chart page →

7,438
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

5,308
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

74,996
mx-notifierbicarus-labs1.1.91 of 1See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
bicarus/mx-notifier:1.1.8bed688d16762
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

3,785
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4

Open the chart page →

87,479
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

10,240
bdbablackduck2026.6.35 of 9See more

bdba blackduck 2026.6.3

5 of the 9 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
blackducksoftware/bdba-fluentd:2026.6.3c14bbbf45536
tar@1.35+dfsg-3.1
no fix listed
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
tar@1.35+dfsg-3.1
no fix listed
library/memcached:1.6.42-trixiee2a8683c7fbb
tar@1.35+dfsg-3.1
no fix listed
library/postgres:15.18-bookworme8db9bd3e9e1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/rabbitmq:4.2.87561d672fae4
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4

Open the chart page →

9,974
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

13,551
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,887
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3

Open the chart page →

15,345
istio-bookinfobookinfo1.2.23 of 6See more

istio-bookinfo bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
tar@1.28-2.1ubuntu0.1
1.28-2.1ubuntu0.2+esm6

Open the chart page →

19,082
colosseumbook-k8sinfra-v21.0.184 of 5See more

colosseum book-k8sinfra-v2 1.0.18

4 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-agg:logbc25b152d88e
tar@1.34+dfsg-1ubuntu0.1.22.04.4
1.34+dfsg-1ubuntu0.1.22.04.6
sysnet4admin/colosseum-cms:loge74b43c7f492
tar@1.34+dfsg-1.2+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
tar@1.34+dfsg-1.2+deb12u1
no fix listed
sysnet4admin/colosseum-rwd:log74ded2d92f07
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

27,611
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,312
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
library/cassandra:3.11.65aa8400b4b3b
tar@1.29b-2ubuntu0.1
1.29b-2ubuntu0.4+esm4

Open the chart page →

19,390
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

8,400
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

27,831
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5704.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,887

Container images carrying it

2,280 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-5704.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.