bpatrik/pigallery2:1.9.0-debian-buster container image

Docker Hub

Scanned 30 Sept 2026

Deployed by 1 of 17,957 indexed charts (latest versions) at this tag.Docker Hub all tags of bpatrik/pigallery2

bpatrik/pigallery2:1.9.0-debian-buster resolved to 21fbaa5fae61, scanned 30 Sept 2026: 206 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them pi-gallery2.

Radar Score

3,0790861137

206 findings on digest 21fbaa5fae61 · scanned 30 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.9.0-debian-busterresolves to	21fbaa5fae61	1 chart	3 days ago	0861137	3,079

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

206 distinct on this digest

Findings for digest 21fbaa5fae61 as scanned on 30 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 30 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-27p8-2357-5qqv	xmldom@0.1.31	no fix listed
Medium	GHSA-4w3w-2rp5-g8jm	xmldom@0.1.31	no fix listed
Medium	GHSA-c7q8-3ch8-vqpv	xmldom@0.1.31	no fix listed
Medium	GHSA-w2rr-34g9-rvrj	xmldom@0.1.31	no fix listed
Medium	GHSA-8344-3jmq-59r6	xmldom@0.1.31	no fix listed
Medium	DLA-3213-1	krb5@1.17-3+deb10u1	1.17-3+deb10u5
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.7	0.1.13
Medium	GHSA-9wv6-86v2-598j	path-to-regexp@0.1.7	0.1.10
Medium	GHSA-965w-775f-mr7g	xmldom@0.1.31	no fix listed
Medium	GHSA-8cj5-5rvv-wf4v	tar-fs@2.1.1	2.1.3
Medium	GHSA-5fg8-2547-mr8q	xmldom@0.1.31	no fix listed
Medium	GHSA-3xgq-45jj-v275	cross-spawn@5.1.0	6.0.6
Medium	GHSA-vj76-c3g6-qr5v	tar-fs@2.1.1	2.1.4
Medium	GHSA-pfrx-2q88-qq97	got@6.7.1	11.8.5
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.0.4	3.1.3
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.19.0	1.20.3
Medium	DLA-3152-1	glibc@2.28-10	2.28-10+deb10u2
Medium	GHSA-34x7-hfp2-rc4v	tar@4.4.13	7.5.7
Medium	GHSA-vh95-rmgr-6w4m	minimist@0.0.10	0.2.1
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	DSA-5122-1	gzip@1.9-3	1.9-3+deb10u1
Low	DSA-5123-1	xz-utils@5.2.4-1	5.2.4-1+deb10u1
Low	DSA-5073-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u2
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.2	2.5.6
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.13	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.13	7.5.18
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	GHSA-h64w-w9pr-82m4	exifreader@3.15.0	4.39.0
Low	GHSA-pj96-35fp-cfcc	exifreader@3.15.0	4.41.1
Low	GHSA-f5x3-32g6-xq36	tar@4.4.13	6.2.1
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.0	4.3.0
Low	DSA-5142-1	libxml2@2.9.4+dfsg1-7+deb10u1	2.9.4+dfsg1-7+deb10u4
Low	DLA-3314-1	libsdl2@2.0.9+dfsg1-1	2.0.9+dfsg1-1+deb10u1
Low	DSA-4990-1	ffmpeg@7:4.1.6-1~deb10u1	7:4.1.8-0+deb10u1
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.0	4.3.2
Low	GHSA-wh4c-j3r5-mjhp	xmldom@0.1.31	no fix listed
Low	GHSA-r292-9mhp-454m	tar@4.4.13	7.5.21
Low	DLA-3363-1	pcre2@10.32-5	10.32-5+deb10u1
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-qffp-2rhf-9h96	tar@4.4.13	7.5.10
Low	DSA-4947-1	libsndfile@1.0.28-6	1.0.28-6+deb10u1
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.13	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.4.23	0.5.0
Low	DSA-5147-1	dpkg@1.19.7	1.19.8
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5
Low	DSA-4919-1	lz4@1.8.3-1	1.8.3-1+deb10u1

Used by

1 chart

Chart	Version	Tag	Containers
pi-gallery2homeenterpriseinc	0.3.0	1.9.0-debian-buster	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.