StackRadarChart IndexLive demo

DSA-5958-1

Unscored

Advisory

Published 4 Jul 2025In the index since 6 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 1 of 1; affected package

jpeg-xl - security update

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
jpeg-xldeb	0.7.0-10	0.7.0-10+deb12u1	8

OSV records: DSA-5958-1

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

paperless-ngxcrystalnet

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

13,761

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

10,072

difykubeblocks

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
langgenius/dify-api :0.6.11	fca918260dd6	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

20,403

mopidygeek-cookbook

1 of 1 See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
jaedb/iris :latest	048cfbf58d57	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

12,958

paperlesshomelabcihelmchartstest

1 of 1 See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

16,384

deconzjanip81-helm-charts

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

10,780

speecht5test-opea

1 of 1 See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
opea/speecht5 :1.0	249afad3d268	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

9,616

maybe-financevicsufer

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry DSA-5958-1.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1

Open the chart page →

10,795

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
castopod/castopod :1.12.10	1fd37280cbb2	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
deconzcommunity/deconz :2.29.2	062de2362641	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
jaedb/iris :latest	048cfbf58d57	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
langgenius/dify-api :0.6.11	fca918260dd6	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
opea/speecht5 :1.0	249afad3d268	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	jpeg-xl@0.7.0-10	0.7.0-10+deb12u1	1