StackRadar

USN-8945-1

Unscored

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,265
of 18,219 indexed, latest versions
Container images
1,199
deployed by those charts
Fix available
1 of 1
affected package

xz-utils vulnerability

Carried by container images the latest versions of 1,265 of 18,219 indexed charts deploy, on 1,199 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+9 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3, 5.2.2-1.3ubuntu0.1+esm2, 5.2.4-1ubuntu1.1+esm2+4 more1,199
OSV records
USN-8945-1
Trending
Rank 5 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,265 by stars
ChartLatestAffected imagesRadar Score
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

8,137
matomopockostVerified publisher1.4.01 of 3See more

matomo pockost 1.4.0

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

6,391
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
treskon/portrait:DEV-latest88e813f22347
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1

Open the chart page →

37,593
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

7,079
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

64,522
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

8,172
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,702
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latestf611790ecffa
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

70,018
reportportalreportportal-ioOfficialVerified publisher26.10.131 of 15See more

reportportal reportportal-io 26.10.13

1 of the 15 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6-management8dd6e3570dda
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

12,330
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

9,354
service-names-port-numbersrm3lVerified publisher0.27.01 of 1See more

service-names-port-numbers rm3l 0.27.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,740
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

6,602
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

7,564
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

8,810
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
timescale/timescaledb-ha:pg169c6c86701e9b
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

15,611
rstudio-pmrstudioVerified publisher0.20.71 of 1See more

rstudio-pm rstudio 0.20.7

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

25,084
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

14,282
conference-appsalaboy1.0.03 of 7See more

conference-app salaboy 1.0.0

3 of the 7 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

14,581
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

2,964
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

20,955
seq-input-gelfseq-input-gelfVerified publisher0.3.11 of 2See more

seq-input-gelf seq-input-gelf 0.3.1

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
datalust/seq-input-gelf:3.0.441-x643de34aed5642
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

3,711
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

7,533
clickhousesinextraVerified publisher0.22.11 of 1See more

clickhouse sinextra 0.22.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3.1092098d3b31dd
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

2,418
gitlab-omnibusslamdev0.1.61 of 2See more

gitlab-omnibus slamdev 0.1.6

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
daedalusproject/base_kubectl:latest6f72b5119eda
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

3,077
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

250,408
rabbitmqsolidchartsVerified publisher0.8.01 of 2See more

rabbitmq solidcharts 0.8.0

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/rabbitmq:4.4.0-managementc200fd496482
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1

Open the chart page →

1,122
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

3,042
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

14,406
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

103,555
stornxstornxVerified publisher1.1.12 of 9See more

stornx stornx 1.1.1

2 of the 9 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
istio/pilot:1.29.1f8b0e412ac4a
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

16,981
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,426
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
kong/kong:3.9.16addf50e6bd8
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

22,516
supersonicsupersonicVerified publisher0.3.11 of 2See more

supersonic supersonic 0.3.1

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.92956bd9de830
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

2,441
mumblesyntaxerror404Verified publisher1.0.51 of 1See more

mumble syntaxerror404 1.0.5

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.8703da59810c075
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,174
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,027
typesensetypesenseVerified publisher1.1.51 of 1See more

typesense typesense 1.1.5

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
typesense/typesense:30.191604dc128e2
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

2,203
ueransim-gnbueransim-gnbVerified publisher0.2.61 of 1See more

ueransim-gnb ueransim-gnb 0.2.6

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

4,339
ueransim-uesueransim-uesVerified publisher0.1.21 of 1See more

ueransim-ues ueransim-ues 0.1.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

4,339
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

4,792
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

8,440
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

16,889
reflectorwener10.0.651 of 1See more

reflector wener 10.0.65

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,122
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3

Open the chart page →

42,281
spark-operatorwikimedia2.2.91 of 1See more

spark-operator wikimedia 2.2.9

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

56,141
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.121 of 1See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1

Open the chart page →

1,204
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
typesense/typesense:28.0.rc35dea1b62b7b6e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

6,181
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

10,834
qleverzazukoVerified publisher0.7.21 of 2See more

qlever zazuko 0.7.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.39f553deb16a5
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

2,745
mikochizer0tonin1.12.11 of 1See more

mikochi zer0tonin 1.12.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
zer0tonin/mikochi:1.12.1654af3e65245
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1

Open the chart page →

688
backendzymtraceOfficialVerified publisher26.10.12 of 6See more

backend zymtrace 26.10.1

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
ghcr.io/zystem-io/zymtrace-pub-gateway:26.10.167b7df12d874
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

11,600

Container images carrying it

1,199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries USN-8945-1.

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.