StackRadarChart IndexLive demo

DSA-5516-1

Unscored

Advisory

Published 5 Oct 2023In the index since 6 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 59; of 17,781 indexed, latest versions
Container images: 52; deployed by those charts
Fix available: 1 of 1; affected package

libxpm - security update

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 52 images.

Affected package	Affected versions	Fixed in	Images
libxpmdeb	1:3.5.12-1, 1:3.5.12-1.1, 1:3.5.12-1.1~deb11u1	1:3.5.12-1.1+deb11u1, 1:3.5.12-1.1+deb12u1	52

OSV records: DSA-5516-1

Charts affected

59 by stars

Chart

Latest

Affected images

Radar Score

openldapopenldap

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1

Open the chart page →

5,293

mattermost-defaultbackendphntom

1 of 1 See more

mattermost-defaultbackend phntom 0.1.4

1 of the 1 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
phntom/mattermost-defaultbackend :6.4.0	c318dc90a4bf	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1

Open the chart page →

1,393

pollstrpollstr

1 of 1 See more

pollstr pollstr 0.1.0

1 of the 1 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
ghcr.io/mroxso/pollstr :latest	0b4f97faa3d0	libxpm@1:3.5.12-1.1~deb11u1	1:3.5.12-1.1+deb11u1

Open the chart page →

813

evsantisbon

2 of 5 See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
santisbon/evwatcher :latest	c4e994ca4540	libxpm@1:3.5.12-1.1	1:3.5.12-1.1+deb12u1
santisbon/evworker :latest	e807283f8d69	libxpm@1:3.5.12-1.1	1:3.5.12-1.1+deb12u1

Open the chart page →

14,179

speedtestsantisbon

1 of 3 See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
santisbon/speedtest :latest	8ee3a1697227	libxpm@1:3.5.12-1.1	1:3.5.12-1.1+deb12u1

Open the chart page →

12,668

phpmyadminsitepilot

1 of 1 See more

phpmyadmin sitepilot 1.0.1

1 of the 1 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.1	38437e021deb	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1

Open the chart page →

1,724

skeleton-pipskeleton-pip

1 of 1 See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/skeleton-pip :dev	ce1ebe9387a2	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1

Open the chart page →

1,126

marge-botslamdev

1 of 1 See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.11.0	7235809b43b3	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1

Open the chart page →

1,426

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DSA-5516-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1

Open the chart page →

7,552

Container images carrying it

52 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/jtekt-corporation/annotation-tool :ef974ad9	abd817eb6845	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1	1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool :a3fa9360	56efd38500d6	libxpm@1:3.5.12-1	1:3.5.12-1.1+deb11u1	1