StackRadar

DSA-5979-2

Unscored

Advisory

Published 25 Sept 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
182
of 17,781 indexed, latest versions
Container images
162
deployed by those charts
Fix available
1 of 1
affected package

libxslt - regression update

Carried by container images the latest versions of 182 of 17,781 indexed charts deploy, on 162 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.35-1, 1.1.35-1.2, 1.1.35-1+deb12u1, 1.1.35-1+deb12u21.1.35-1.2+deb13u2, 1.1.35-1+deb12u3162
OSV records
DSA-5979-2

Charts affected

182 by stars
ChartLatestAffected imagesRadar Score
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

12,566
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3

Open the chart page →

4,456
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

21,211
kresusrm3lVerified publisher0.2.12 of 3See more

kresus rm3l 0.2.1

2 of the 3 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
bnjbvr/kresus:0.22.137e216b182c8
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

15,591
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3

Open the chart page →

9,256
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

32,902
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

3,891
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

7,413
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

16,620
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

10,209
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,888
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

20,223
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

3,032
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

13,390
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,199
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

6,297
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,648
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/codegen-ui:1.02bee4eb66f3e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/codetrans-ui:1.03ef121f34610
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opea/docsum-ui:1.07f854e9bffaf
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

28,858
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

25,394
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

5,535
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libxslt@1.1.35-1
1.1.35-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

14,358
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

8,811
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3

Open the chart page →

7,624
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

11,577
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry DSA-5979-2.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxslt@1.1.35-1
1.1.35-1+deb12u3

Open the chart page →

7,673

Container images carrying it

162 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
11
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u3
6
bitnamilegacy/postgresql:17.5.0:latest42a8200d3597
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
5
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
1.1.35-1+deb12u3
5
bitnamilegacy/postgresql:16233f361c5819
libxslt@1.1.35-1
1.1.35-1+deb12u3
4
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
4
library/nginx:1.27.1287ff321f9e3
libxslt@1.1.35-1
1.1.35-1+deb12u3
4
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u3
3
library/nginx:1.25:1.25.5a484819eb602
libxslt@1.1.35-1
1.1.35-1+deb12u3
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u3
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u3
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
library/nginx:1.27.098f8ec75657d
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
library/postgres:16.24aea012537ed
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
library/postgres:16.4e62fbf9d3e2b
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
library/python:3.7eedf63967cdb
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
libxslt@1.1.35-1
1.1.35-1+deb12u3
2
ankane/pgvector:v0.5.1d3a9d8ac27bb
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
apache/airflow:2.8.4-python3.964e58748b6b9
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
apache/airflow:2.8.1e5560ad0b86e
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
assistiot/identity-manager_db:latest0d3e6d35f168
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
avinash263/pyredis263:latestaa2b8727f1a6
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
avzini/web-app:latestf40b30210ed0
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
baserow/backend:1.31.1e0b3c8130b91
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
baserow/baserow:1.30.1df0c42eb67e8
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u3
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
libxslt@1.1.35-1+deb12u2
1.1.35-1+deb12u3
1
bitnamilegacy/pgbouncer:1.23.192356da09704
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
libxslt@1.1.35-1
1.1.35-1+deb12u3
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
libxslt@1.1.35-1
1.1.35-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.