StackRadar

CVE-2026-5704

Medium

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,297
of 17,828 indexed, latest versions
Container images
2,280
deployed by those charts
Fix available
2 of 2
affected packages

tar-1.35-8.1 on GA media

Carried by container images the latest versions of 2,297 of 17,828 indexed charts deploy, on 2,280 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+28 more1.27.1-1ubuntu0.1+esm7, 1.28-2.1ubuntu0.2+esm6, 1.29b-2ubuntu0.4+esm4, 1.30+dfsg-7ubuntu0.20.04.4+esm3+4 more2,273
tarrpm1.30-lp152.3.6, 1.34-150000.3.34.1, 1.34-150000.3.37.11.34-150000.3.42.1, 1.35-8.17
OSV records
DEBIAN-CVE-2026-5704UBUNTU-CVE-2026-5704ECHO-6544-7e09-569copenSUSE-SU-2026:11125-1SUSE-SU-2026:2714-1
Also known as
USN-8477-1, USN-8477-2, USN-8477-3

Charts affected

2,297 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,280 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
atlassian/jira-software:8.14.037bc46cbec1a
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.6
1
atlassian/jira-software:9.7.264a75aa4ec4e
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.4
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
tar@1.34+dfsg-1.2
no fix listed
1
avzini/web-app:latestf40b30210ed0
tar@1.34+dfsg-1.2
no fix listed
1
baserow/backend:2.3.37c00549b3a6f
tar@1.35+dfsg-3.1
no fix listed
1
baserow/backend:1.31.1e0b3c8130b91
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
baserow/web-frontend:2.3.3566d24c7d9f5
tar@1.35+dfsg-3.1
no fix listed
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
tar@1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
bcgovimages/aries-cloudagent:py36-1.16-1_0.7.4faa2e2d21916
tar@1.29b-2ubuntu0.2
1.29b-2ubuntu0.4+esm4
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
tar@1.35+dfsg-3.1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
tar@1.35+dfsg-3.1
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
bicarus/mx-notifier:1.1.8bed688d16762
tar@1.30+dfsg-7ubuntu0.20.04.2
1.30+dfsg-7ubuntu0.20.04.4+esm3
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/git:latest4b08d0c5af8d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.301249fc292e84
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.3164614ef8290f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/kube-state-metrics:204a3044b384b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.