StackRadar

USN-8945-1

Unscored

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,283
of 18,219 indexed, latest versions
Container images
1,216
deployed by those charts
Fix available
1 of 1
affected package

xz-utils vulnerability

Carried by container images the latest versions of 1,283 of 18,219 indexed charts deploy, on 1,216 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+9 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3, 5.2.2-1.3ubuntu0.1+esm2, 5.2.4-1ubuntu1.1+esm2+4 more1,216
OSV records
USN-8945-1
Trending
Rank 3 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,283 by stars
ChartLatestAffected imagesRadar Score
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,368
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,841
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,841
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:100d0945c57f75
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

94,339
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

15,456
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
library/mongo:4.44be76f674fc4
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

30,929
apisixwener2.18.21 of 3See more

apisix wener 2.18.2

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/apisix:3.19.0-ubuntubb4958b94394
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,674
argo-cdwener10.10.51 of 3See more

argo-cd wener 10.10.5

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1

Open the chart page →

2,866
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

75,441
kubernetes-dashboardwener7.14.01 of 5See more

kubernetes-dashboard wener 7.14.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kong:3.9aa4a4687b133
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,225
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

17,357
openebswener3.10.02 of 3See more

openebs wener 3.10.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
openebs/node-disk-operator:2.1.06afe2123c457
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,748
apisixwenerme2.18.21 of 3See more

apisix wenerme 2.18.2

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/apisix:3.19.0-ubuntubb4958b94394
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,674
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

75,441
kubernetes-dashboardwenerme7.14.01 of 5See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kong:3.9aa4a4687b133
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,225
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

17,357
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
openebs/node-disk-operator:2.1.06afe2123c457
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,748
reflectorwenerme10.0.651 of 1See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,122
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

12,851
elasticsearchwiremindVerified publisher8.19.11 of 1See more

elasticsearch wiremind 8.19.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.22909a569c9c97
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

698
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,748
wordpress-alpinewordpress-alpine1.5.201 of 6See more

wordpress-alpine wordpress-alpine 1.5.20

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,255
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:lts2bdff1534a7e
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

6,013
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

16,160
am-pattern-1wso22.6.0-72 of 6See more

am-pattern-1 wso2 2.6.0-7

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

33,623
am-pattern-2wso22.6.0-72 of 6See more

am-pattern-2 wso2 2.6.0-7

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

33,623
ei-pattern-1wso26.6.0-33 of 6See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2ei-analytics-dashboard:6.6.0526a1ccae902
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
wso2/wso2ei-analytics-worker:6.6.021e6b03449ac
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
wso2/wso2ei-integrator:6.6.0790cd8c3a5a2
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

52,914
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

15,777
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

2,413
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

12,551
ceph-exporterygqygq2Verified publisher1.0.01 of 1See more

ceph-exporter ygqygq2 1.0.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
digitalocean/ceph_exporter:latest19b163e3fb95
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

6,920
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

9,868
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

7,537

Container images carrying it

1,216 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm2
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
quay.io/go-skynet/local-ai:latestf1bc435659b9
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.