StackRadar

DSA-5979-2

Unscored

Advisory

Published 25 Sept 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
182
of 17,781 indexed, latest versions
Container images
162
deployed by those charts
Fix available
1 of 1
affected package

libxslt - regression update

Carried by container images the latest versions of 182 of 17,781 indexed charts deploy, on 162 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.35-1, 1.1.35-1.2, 1.1.35-1+deb12u1, 1.1.35-1+deb12u21.1.35-1.2+deb13u2, 1.1.35-1+deb12u3162
OSV records
DSA-5979-2

Charts affected

182 by stars
ChartLatestAffected imagesRadar Score
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

12,566
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3

Open the chart page →

4,456
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

21,211
kresusrm3lVerified publisher0.2.12 of 3See more

kresus rm3l 0.2.1

2 of the 3 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
bnjbvr/kresus:0.22.137e216b182c8
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

15,591
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3

Open the chart page →

9,256
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

32,902
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

3,891
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

7,413
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

16,620
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

10,209
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,888
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

20,223
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

3,032
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

13,390
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,199
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

6,297
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,648
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/codegen-ui:1.02bee4eb66f3e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/codetrans-ui:1.03ef121f34610
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/docsum-ui:1.07f854e9bffaf
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,858
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

25,394
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

5,535
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

14,358
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

8,811
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

7,624
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,577
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

7,673

Container images carrying it

162 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
moreillon/camera-viewer:lateste418cc694bd5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
moreillon/food-manager:lateste8fd856e593d
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
moreillon/user-manager-front:v5.1.06597e6b98d21
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
muhammedgamal/fp23:latest74b4cd69b6fa
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
nirmalnaveen/supermario:latest8541a39162f3
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
opea/codegen-ui:1.02bee4eb66f3e
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
opea/codetrans-ui:1.03ef121f34610
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
opea/docsum-ui:1.07f854e9bffaf
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
openproject/hocuspocus:release-338001b288dc1359dfb5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
pk910/powfaucet:v2-stable3dcae6a62896
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
praravind1801/helmimages:3.0.0f29d637b9ce1
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
redash/redash:25.8.000d813437db5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
shamimkuet/nginx:1.0.2b82902a76a04
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
somnathmore/custom-nginx:v2bdfc06cad4ec
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
substratusai/verba:v0.4.0-baseURL261695be635eb
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
sysnet4admin/colosseum-cms:loge74b43c7f492
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
teknas09/bird-pod:latest12a1fa85c4aa
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
theradius/loggia:0.463ba348546ec
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
thongngo3301/stakefish:latesta341af5976e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
vlebediantsev/notes-admin-front:latest007c6670ff48
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
vlebediantsev/notes-project-front:latest945675fd2636
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libxslt@1.1.35-1
1.1.35-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.