StackRadar

DSA-5930-1

Unscored

Advisory

Published 29 May 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,781 indexed, latest versions
Container images
57
deployed by those charts
Fix available
1 of 1
affected package

libavif - security update

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 57 images.

Affected packageAffected versionsFixed inImages
libavifdeb0.11.1-10.11.1-1+deb12u157
OSV records
DSA-5930-1

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry DSA-5930-1.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

39,090
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry DSA-5930-1.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry DSA-5930-1.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry DSA-5930-1.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,858
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry DSA-5930-1.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

45,239
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry DSA-5930-1.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,673

Container images carrying it

57 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1
4
library/nginx:1.25:1.25.5a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libavif@0.11.1-1
0.11.1-1+deb12u1
3
library/nginx:1.27.098f8ec75657d
libavif@0.11.1-1
0.11.1-1+deb12u1
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libavif@0.11.1-1
0.11.1-1+deb12u1
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libavif@0.11.1-1
0.11.1-1+deb12u1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
libavif@0.11.1-1
0.11.1-1+deb12u1
2
allegroai/clearml:2.0.0-613713ae38f7daf
libavif@0.11.1-1
0.11.1-1+deb12u1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
libavif@0.11.1-1
0.11.1-1+deb12u1
1
avzini/web-app:latestf40b30210ed0
libavif@0.11.1-1
0.11.1-1+deb12u1
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libavif@0.11.1-1
0.11.1-1+deb12u1
1
dannielkil/book-frontend:latest937993927694
libavif@0.11.1-1
0.11.1-1+deb12u1
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libavif@0.11.1-1
0.11.1-1+deb12u1
1
emqx/ecp-ui:2.5.1e33e9816f147
libavif@0.11.1-1
0.11.1-1+deb12u1
1
felipecs8/app-db-connection-test:v129e06c9c6385
libavif@0.11.1-1
0.11.1-1+deb12u1
1
firefart/requesttracker:5.0.40d6249906d8c
libavif@0.11.1-1
0.11.1-1+deb12u1
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libavif@0.11.1-1
0.11.1-1+deb12u1
1
hazegoodlife/haaze:milksite8d4c63169e14
libavif@0.11.1-1
0.11.1-1+deb12u1
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
libavif@0.11.1-1
0.11.1-1+deb12u1
1
jaedb/iris:latest048cfbf58d57
libavif@0.11.1-1
0.11.1-1+deb12u1
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:main1ad759b961b1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:news3e8880fbbb96
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:blog4a7707410bf1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:shop84a9d9766345
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.27.409369da6b103
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.25.167f9a4f10d14
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.25.49ff236ed47fe
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.27.3fb197595ebe7
libavif@0.11.1-1
0.11.1-1+deb12u1
1
logiqai/flash:v3.10.265b996bc7bdc
libavif@0.11.1-1
0.11.1-1+deb12u1
1
makersquad/harp-proxy:0.8.1a40dd258c527
libavif@0.11.1-1
0.11.1-1+deb12u1
1
moreillon/user-manager-front:v5.1.06597e6b98d21
libavif@0.11.1-1
0.11.1-1+deb12u1
1
nirmalnaveen/supermario:latest8541a39162f3
libavif@0.11.1-1
0.11.1-1+deb12u1
1
openbas/caldera-server:5.1.0a277796d9724
libavif@0.11.1-1
0.11.1-1+deb12u1
1
phan2410/dummy-service:0.0.89c6ed6de26ca
libavif@0.11.1-1
0.11.1-1+deb12u1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
libavif@0.11.1-1
0.11.1-1+deb12u1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/evwatcher:latestc4e994ca4540
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/evworker:lateste807283f8d69
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/speedtest:latest8ee3a1697227
libavif@0.11.1-1
0.11.1-1+deb12u1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libavif@0.11.1-1
0.11.1-1+deb12u1
1
shamimkuet/nginx:1.0.2b82902a76a04
libavif@0.11.1-1
0.11.1-1+deb12u1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
libavif@0.11.1-1
0.11.1-1+deb12u1
1
somnathmore/custom-nginx:v2bdfc06cad4ec
libavif@0.11.1-1
0.11.1-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.