StackRadarChart IndexLive demo

DSA-5979-1

Unscored

Advisory

Published 19 Aug 2025In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.012; 67th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 167; of 17,781 indexed, latest versions
Container images: 157; deployed by those charts
Fix available: 1 of 1; affected package

libxslt - security update

Carried by container images the latest versions of 167 of 17,781 indexed charts deploy, on 157 images.

Affected package	Affected versions	Fixed in	Images
libxsltdeb	1.1.35-1, 1.1.35-1.2, 1.1.35-1+deb12u1	1.1.35-1.2+deb13u1, 1.1.35-1+deb12u2	157

OSV records: DSA-5979-1

Charts affected

167 by stars

Chart

Latest

Affected images

Radar Score

spacecapybara-chartspacecapy

1 of 2 See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
sashafefler/spacecapybara_app :latest	f96d7804c0ca	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

11,888

stakefishstakefish

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

20,223

substra-frontendsubstra

1 of 1 See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
ghcr.io/substra/substra-frontend :1.0.0	e230e6ac0722	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

3,032

verbasubstratus

1 of 1 See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
substratusai/verba :v0.4.0-baseURL2	61695be635eb	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

13,390

1 of 1 See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/python :3.8	d41127070014	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

11,199

super-mariotechpreta

1 of 1 See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
nirmalnaveen/supermario :latest	8541a39162f3	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

6,297

helm-testtest-helm-artifacthub

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_backend :latest	8ffa63aa995d	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

11,648

chatqnatest-opea

1 of 11 See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

39,090

codegentest-opea

2 of 5 See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	libxslt@1.1.35-1	1.1.35-1+deb12u2
opea/codegen-ui :1.0	2bee4eb66f3e	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

28,814

codetranstest-opea

2 of 5 See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	libxslt@1.1.35-1	1.1.35-1+deb12u2
opea/codetrans-ui :1.0	3ef121f34610	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

28,385

docsumtest-opea

2 of 5 See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/nginx :1.27.1	287ff321f9e3	libxslt@1.1.35-1	1.1.35-1+deb12u2
opea/docsum-ui :1.0	7f854e9bffaf	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

28,858

thingsboardthingsboard

1 of 12 See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

25,394

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

17,323

opencloudunxwares

6 of 13 See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	libxslt@1.1.35-1	1.1.35-1+deb12u2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	libxslt@1.1.35-1	1.1.35-1+deb12u2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	libxslt@1.1.35-1	1.1.35-1+deb12u2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	libxslt@1.1.35-1	1.1.35-1+deb12u2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	libxslt@1.1.35-1	1.1.35-1+deb12u2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

45,239

demo-backendv2fly

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

14,358

workshop-pipelinesworkshop-pipelines

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

11,577

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry DSA-5979-1.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libxslt@1.1.35-1	1.1.35-1+deb12u2

Open the chart page →

7,673

Container images carrying it

157 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	libxslt@1.1.35-1	1.1.35-1+deb12u2	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	libxslt@1.1.35-1	1.1.35-1+deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	libxslt@1.1.35-1	1.1.35-1+deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	libxslt@1.1.35-1	1.1.35-1+deb12u2	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	libxslt@1.1.35-1	1.1.35-1+deb12u2	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	libxslt@1.1.35-1	1.1.35-1+deb12u2	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libxslt@1.1.35-1	1.1.35-1+deb12u2	1