StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,240
of 17,792 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
2 of 2
affected packages

Security update for tar

Carried by container images the latest versions of 2,240 of 17,792 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,189
tarrpm1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.16
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569cSUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,240 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
tar@1.35+dfsg-3.1
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
bicarus/mx-notifier:1.1.8bed688d16762
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/git:latest4b08d0c5af8d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.301249fc292e84
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.3164614ef8290f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kube-state-metrics:204a3044b384b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mongodb:latestb0652af9c8d0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.