StackRadar

DSA-5979-1

Unscored

Advisory

Published 19 Aug 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
167
of 17,781 indexed, latest versions
Container images
157
deployed by those charts
Fix available
1 of 1
affected package

libxslt - security update

Carried by container images the latest versions of 167 of 17,781 indexed charts deploy, on 157 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.35-1, 1.1.35-1.2, 1.1.35-1+deb12u11.1.35-1.2+deb13u1, 1.1.35-1+deb12u2157
OSV records
DSA-5979-1

Charts affected

167 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

11,367
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

6,699
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

19,391
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

19,926
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

5,987
litellm-helmlitellm1.100.11 of 2See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,003
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,786
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

23,228
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

17,245
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

17,263
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

10,428
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

96,941
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,779
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

28,839
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

10,530
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

4,060
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,521
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

8,690
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

7,052
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

22,202
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

15,863
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

9,724
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,761
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
libxslt@1.1.35-1
1.1.35-1+deb12u2
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

52,635
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/postgres:15.38775adb39f0d
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

15,562
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,610
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/postgres:17.5-bookwormfbcea1bd13b6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

8,716
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

15,712
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

13,738
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u2
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

14,838
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,779
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

31,844
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

6,521
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

5,315
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libxslt@1.1.35-1
1.1.35-1+deb12u2
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

30,234
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,676
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

12,581
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
library/postgres:17.4304ab8135187
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

10,323
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
libxslt@1.1.35-1
1.1.35-1+deb12u2
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

25,669
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,352
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

32,501
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry DSA-5979-1.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2
kuzwolka/aws9:news3e8880fbbb96
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2
kuzwolka/aws9:blog4a7707410bf1
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2
kuzwolka/aws9:shop84a9d9766345
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

18,344

Container images carrying it

157 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
1.1.35-1+deb12u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.