StackRadar

DSA-5979-2

Unscored

Advisory

Published 25 Sept 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
182
of 17,781 indexed, latest versions
Container images
162
deployed by those charts
Fix available
1 of 1
affected package

libxslt - regression update

Carried by container images the latest versions of 182 of 17,781 indexed charts deploy, on 162 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.35-1, 1.1.35-1.2, 1.1.35-1+deb12u1, 1.1.35-1+deb12u21.1.35-1.2+deb13u2, 1.1.35-1+deb12u3162
OSV records
DSA-5979-2

Charts affected

182 by stars
ChartLatestAffected imagesRadar Score
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

12,566
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3

Open the chart page →

4,456
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

21,211
kresusrm3lVerified publisher0.2.12 of 3See more

kresus rm3l 0.2.1

2 of the 3 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
bnjbvr/kresus:0.22.137e216b182c8
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

15,591
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3

Open the chart page →

9,256
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

32,902
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

3,891
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

7,413
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

16,620
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

10,209
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,888
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

20,223
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

3,032
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

13,390
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,199
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

6,297
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,648
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/codegen-ui:1.02bee4eb66f3e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/codetrans-ui:1.03ef121f34610
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/docsum-ui:1.07f854e9bffaf
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,858
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

25,394
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

5,535
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

14,358
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

8,811
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

7,624
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,577
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

7,673

Container images carrying it

162 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/postgresql:16.4.03ba6e6f11388
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bnjbvr/kresus:0.22.137e216b182c8
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ckulka/baikal:0.10.1-nginx434bdd162247
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
dannielkil/book-frontend:latest937993927694
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ddosify/selfhosted_backend:3.2.93c11e3182652
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
emqx/ecp-ui:2.5.1e33e9816f147
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
felipecs8/app-db-connection-test:v129e06c9c6385
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
hazegoodlife/haaze:milksite8d4c63169e14
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
jaedb/iris:latest048cfbf58d57
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
knspar/phronetis-operator:0.1.60c4f0543ee58
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
kuzwolka/aws9:main1ad759b961b1
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
kuzwolka/aws9:news3e8880fbbb96
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
kuzwolka/aws9:blog4a7707410bf1
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
kuzwolka/aws9:shop84a9d9766345
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
laly9999/node-app:1dd0e503913e1
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
library/nginx:1.27.409369da6b103
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
library/nginx:1.276784fb0834aa
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
library/nginx:1.25.167f9a4f10d14
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
library/nginx:1.25.49ff236ed47fe
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
library/nginx:1.27.3fb197595ebe7
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
library/postgres:17.4304ab8135187
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
library/postgres:16.6557fea37a744
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
library/postgres:15.38775adb39f0d
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
library/postgres:17.5aadf2c0696f5
libxslt@1.1.35-1.2
1.1.35-1.2+deb13u2
1
library/postgres:13.12ced3ba927f4c
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
library/postgres:17.5-bookwormfbcea1bd13b6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
library/python:3.8d41127070014
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
middlewareeng/middleware:0.3.1747d880812f1
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
moreillon/api-proxy:latestd7d4a5463525
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.