StackRadar

DSA-5884-1

Unscored

Advisory

Published 23 Mar 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
134
of 17,781 indexed, latest versions
Container images
123
deployed by those charts
Fix available
1 of 1
affected package

libxslt - security update

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 123 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.35-11.1.35-1+deb12u1123
OSV records
DSA-5884-1

Charts affected

134 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

11,367
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

19,391
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

6,543
litellm-helmlitellm1.100.11 of 2See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,003
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,786
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

23,228
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

17,245
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

17,263
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

10,428
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

96,941
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,779
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

28,839
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

10,530
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

13,521
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

8,690
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

7,052
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

22,202
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

9,724
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

13,761
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

52,635
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/postgres:15.38775adb39f0d
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

15,562
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

13,610
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

14,838
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,779
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

31,844
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

6,521
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libxslt@1.1.35-1
1.1.35-1+deb12u1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

30,234
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,676
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

12,581
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
libxslt@1.1.35-1
1.1.35-1+deb12u1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

25,669
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

13,352
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

32,501
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

6,297
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

6,297
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

10,145
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

88,335
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

10,776
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

15,371
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

4,770
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

7,503
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

10,090
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

68,240
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

3,891
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry DSA-5884-1.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u1

Open the chart page →

32,902

Container images carrying it

123 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
1.1.35-1+deb12u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
1.1.35-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.