StackRadar

USN-8945-1

Unscored

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,283
of 18,219 indexed, latest versions
Container images
1,216
deployed by those charts
Fix available
1 of 1
affected package

xz-utils vulnerability

Carried by container images the latest versions of 1,283 of 18,219 indexed charts deploy, on 1,216 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+9 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3, 5.2.2-1.3ubuntu0.1+esm2, 5.2.4-1ubuntu1.1+esm2+4 more1,216
OSV records
USN-8945-1
Trending
Rank 3 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,283 by stars
ChartLatestAffected imagesRadar Score
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,368
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,841
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,841
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:100d0945c57f75
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

94,339
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

15,456
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
library/mongo:4.44be76f674fc4
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

30,929
apisixwener2.18.21 of 3See more

apisix wener 2.18.2

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/apisix:3.19.0-ubuntubb4958b94394
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,674
argo-cdwener10.10.51 of 3See more

argo-cd wener 10.10.5

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1

Open the chart page →

2,866
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

75,441
kubernetes-dashboardwener7.14.01 of 5See more

kubernetes-dashboard wener 7.14.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kong:3.9aa4a4687b133
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,225
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

17,357
openebswener3.10.02 of 3See more

openebs wener 3.10.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
openebs/node-disk-operator:2.1.06afe2123c457
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,748
apisixwenerme2.18.21 of 3See more

apisix wenerme 2.18.2

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/apisix:3.19.0-ubuntubb4958b94394
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,674
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

75,441
kubernetes-dashboardwenerme7.14.01 of 5See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kong:3.9aa4a4687b133
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,225
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

17,357
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
openebs/node-disk-operator:2.1.06afe2123c457
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,748
reflectorwenerme10.0.651 of 1See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,122
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

12,851
elasticsearchwiremindVerified publisher8.19.11 of 1See more

elasticsearch wiremind 8.19.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.22909a569c9c97
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

698
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,748
wordpress-alpinewordpress-alpine1.5.201 of 6See more

wordpress-alpine wordpress-alpine 1.5.20

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,255
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:lts2bdff1534a7e
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

6,013
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

16,160
am-pattern-1wso22.6.0-72 of 6See more

am-pattern-1 wso2 2.6.0-7

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

33,623
am-pattern-2wso22.6.0-72 of 6See more

am-pattern-2 wso2 2.6.0-7

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

33,623
ei-pattern-1wso26.6.0-33 of 6See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2ei-analytics-dashboard:6.6.0526a1ccae902
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
wso2/wso2ei-analytics-worker:6.6.021e6b03449ac
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
wso2/wso2ei-integrator:6.6.0790cd8c3a5a2
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

52,914
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

15,777
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

2,413
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

12,551
ceph-exporterygqygq2Verified publisher1.0.01 of 1See more

ceph-exporter ygqygq2 1.0.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
digitalocean/ceph_exporter:latest19b163e3fb95
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

6,920
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

9,868
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

7,537

Container images carrying it

1,216 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
selenium/node-chrome:4.51.0-20261010b3f54a14452e
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
selenium/node-firefox:4.51.0-20261010e6a109a147cd
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
shaowenchen/ops-server:latest6bac5cebd125
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
1
sifrai/grandine:unstable339224decc52
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sigp/lighthouse:latest05b5068268ea
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sigp/lighthouse:v7.0.12cae720e9a35
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
sigp/lighthouse:v7.1.0870934e38931
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
sigp/lighthouse:v2.1.2ad501f02cfef
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
sigp/lighthouse:latestca59d3a3f301
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sismics/docs:v1.10f4b0ef019cf1
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
1
slagattollas/weatherservice-practica:latest68e7f56393fc
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
1
snipe/snipe-it:v8.3.1141ebf2386fe
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
snipe/snipe-it:v6.0.1455fb7636a98c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm2
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm2
1
softwaremill/bootzooka:latestdfd0d3a7246a
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
sondresjo/altinnendata-api:v1.11.0a4227f072808
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sondresjo/garge-api:v2.18.126a72b083bce
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sondresjo/garge-operator:v1.12.2d8519457b918
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sondresjo/nstuning-api:v1.11.0e902ee2e6a6c
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
sondresjo/pyttogpanne-api:v1.3.04151666ed613
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
spy86/rabbitmq-stomp:latestea649101b9fb
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2actionrunner:3.888235ba70cad
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2api:3.86f56d239d280
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2auth:3.833ecfda16608
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2notifier:3.8f190a6212195
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2rulesengine:3.8259503496ff9
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2scheduler:3.8b1de2055c362
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2stream:3.81c8904a3bf67
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2timersengine:3.81bf35bfaf00c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2web:3.809989a26c8b7
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stackstorm/st2workflowengine:3.819fdfffdbba8
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
stashapp/stash:latest24dbd7607174
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
stashapp/stash-box:latesta534c8afdf39
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
statcan/ckan:2.93921305425b8
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
structurizr/onpremises:2025.11.094b5ffb5119c8
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
supporttools/website:v132603fdbc9e708e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
sysnet4admin/colosseum-agg:logbc25b152d88e
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
tchiotludo/akhq:0.28.0c2824dc2ae44
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.