StackRadar

USN-8945-1

Unscored

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,272
of 18,219 indexed, latest versions
Container images
1,206
deployed by those charts
Fix available
1 of 1
affected package

xz-utils vulnerability

Carried by container images the latest versions of 1,272 of 18,219 indexed charts deploy, on 1,206 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+9 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3, 5.2.2-1.3ubuntu0.1+esm2, 5.2.4-1ubuntu1.1+esm2+4 more1,206
OSV records
USN-8945-1
Trending
Rank 5 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,272 by stars
ChartLatestAffected imagesRadar Score
openebswener3.10.02 of 3See more

openebs wener 3.10.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
openebs/node-disk-operator:2.1.06afe2123c457
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,782
apisixwenerme2.18.21 of 3See more

apisix wenerme 2.18.2

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/apisix:3.19.0-ubuntubb4958b94394
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

3,674
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

75,784
kubernetes-dashboardwenerme7.14.01 of 5See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kong:3.992035d16d7ff
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,240
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

17,383
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
openebs/node-disk-operator:2.1.06afe2123c457
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,782
reflectorwenerme10.0.651 of 1See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,122
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

12,889
elasticsearchwiremindVerified publisher8.19.11 of 1See more

elasticsearch wiremind 8.19.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.22909a569c9c97
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

693
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,727
wordpress-alpinewordpress-alpine1.5.201 of 6See more

wordpress-alpine wordpress-alpine 1.5.20

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,260
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:lts2bdff1534a7e
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

6,068
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

16,195
am-pattern-1wso22.6.0-72 of 6See more

am-pattern-1 wso2 2.6.0-7

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

33,667
am-pattern-2wso22.6.0-72 of 6See more

am-pattern-2 wso2 2.6.0-7

2 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

33,667
ei-pattern-1wso26.6.0-33 of 6See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wso2/wso2ei-analytics-dashboard:6.6.0526a1ccae902
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
wso2/wso2ei-analytics-worker:6.6.021e6b03449ac
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
wso2/wso2ei-integrator:6.6.0790cd8c3a5a2
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

52,973
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

15,777
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

2,421
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

12,550
ceph-exporterygqygq2Verified publisher1.0.01 of 1See more

ceph-exporter ygqygq2 1.0.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
digitalocean/ceph_exporter:latest19b163e3fb95
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

6,948
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

9,916
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

7,561

Container images carrying it

1,206 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
bcgovimages/aries-cloudagent:py36-1.16-1_0.7.4faa2e2d21916
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
1
beanbag/reviewboard:latest6b840f546e1c
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
bicarus/mx-notifier:1.1.8bed688d16762
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
boxcutter/meshcmd:1.1.384e13f01bcab
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
camptocamp/mapserver:master18959d939a66
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1
camptocamp/mapserver:latestccc52498918f
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
camunda/zeebe:8.4.5ab5abc09e407
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
chaerr/kridge:demo-operator-v0.1.266833deec017
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3
1
chetangautamm/repo:sipp.v3e7f7049e1544
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
1
cheveo/azp-agent:1.0.282240f890884
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
cheyang/distributed-tf:1.6.046cc34755493
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3
1
chriseaton/adventureworks:latest54c3384ce701
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
circleci/runner:launch-agent9bdc62f02162
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
ciscolabs/msm-nc:0710202336d02faad958
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
citizenstig/httpbin:latestb81c818ccb86
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:24.81ffa82edee00
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
clickhouse/clickhouse-server:26.9.1639f9dbf1ea6d
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:23.8512bb8a21483
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
clickhouse/clickhouse-server:26.35637f7b3024c
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:latest5d6b622bbb10
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:26.584d05b9c205e
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:latestbdb5c911a23d
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
clickhouse/clickhouse-server:26.9.21fd4652f708ec
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2
1
cloudamqp/lavinmq:2.1.065b5701e57e8
xz-utils@5.6.1+really5.4.5-1build0.1
5.6.1+really5.4.5-1ubuntu0.4
1
cloudve/janis-terminal:latestaf56e77ca587
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
1
cloudve/ttyd:latestd79c1c5881c0
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2
1
consensys/teku:latest0360d1bdc4de
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4
1
consensys/teku:25.4.1bf6ecd2ea716
xz-utils@5.6.1+really5.4.5-1ubuntu0.2
5.6.1+really5.4.5-1ubuntu0.4
1
consensys/web3signer:latest0a64d3b00613
xz-utils@5.8.3-1
5.8.3-1ubuntu0.1
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
cortezaproject/corteza:2024.9.08eb7a26605c9
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2
1
countly/countly-server:25.05.4e3c238248f99
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.