actualbudget/actual-server:25.3.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of actualbudget/actual-server

actualbudget/actual-server:25.3.1 resolved to 58fecd9088b7, scanned 14 Sept 2026: 239 findings, 0 critical; deployed by 1 chart, among them actual-budget.

Radar Score

2,6110139199

239 findings on digest 58fecd9088b7 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
25.3.1resolves to	58fecd9088b7	1 chart	8 days ago	0139199	2,611

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

199 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 58fecd9088b7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-w9j2-pvgh-6h63	axios@1.7.9	1.15.1
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-0.2	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-7q8q-rj6j-mhjq	axios@1.7.9	1.18.0
Low	DEBIAN-CVE-2013-4392	systemd@252.33-1~deb12u1	no fix listed
Low	GHSA-27vg-33gh-4hwg	@actual-app/sync-server@25.3.1	26.3.0
Low	DEBIAN-CVE-2026-78408	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-41989	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-q8mj-m7cp-5q26	qs@6.13.0	6.15.2
Low	DEBIAN-CVE-2023-31439	systemd@252.33-1~deb12u1	no fix listed
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	DEBIAN-CVE-2023-31437	systemd@252.33-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68973	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GHSA-5c9x-8gcm-mpgx	axios@1.7.9	1.15.1
Low	GHSA-vf2m-468p-8v99	axios@1.7.9	1.15.1
Low	DEBIAN-CVE-2023-31438	systemd@252.33-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-445q-vr5w-6q77	axios@1.7.9	1.15.1
Low	DEBIAN-CVE-2026-42014	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-4105	systemd@252.33-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2023-4641	shadow@1:4.13+dfsg1-1+b1	1:4.13+dfsg1-1+deb12u1
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	GHSA-4mjr-xmp4-gh2g	qs@6.13.0	6.16.0
Low	DEBIAN-CVE-2026-40225	systemd@252.33-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2025-1390	libcap2@1:2.66-4	1:2.66-4+deb12u1
Low	GHSA-xx6v-rp6x-q39c	axios@1.7.9	1.15.1
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.24.1-2	no fix listed
Low	GHSA-898c-q2cr-xwhg	axios@1.7.9	1.16.0
Low	DEBIAN-CVE-2025-8058	glibc@2.36-9+deb12u9	2.36-9+deb12u13
Low	DEBIAN-CVE-2026-56392	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-54370	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-15534	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2024-10041	pam@1.5.2-6+deb12u1	no fix listed
Low	GHSA-3f62-qv96-4p78	@actual-app/sync-server@25.3.1	26.6.0
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	DEBIAN-CVE-2026-18938	p11-kit@0.24.1-2	no fix listed
Low	GHSA-w7fw-mjwx-w883	qs@6.13.0	6.14.2

Used by

1 chart

Chart	Version	Tag	Containers
actual-budgetk8s-chartsVerified publisher	0.2.3	25.3.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.