charmcli/soft-serve:v0.4.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of charmcli/soft-serve

charmcli/soft-serve:v0.4.0 resolved to 39523c1a6ba8, scanned 14 Sept 2026: 220 findings, 4 critical, 2 on KEV; deployed by 1 chart, among them soft-serve.

Radar Score

3,1194847161

220 findings on digest 39523c1a6ba8 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v0.4.0resolves to	39523c1a6ba8	1 chart	8 days ago	4847161	3,119

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

220 distinct on this digest

Findings for digest 39523c1a6ba8 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-pchf-49fh-w34r	github.com/charmbracelet/soft-serve@v0.4.0	0.11.3
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20220209214540-3681064d5158	0.0.0-20220412211240-33da011f77ad
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.35.0
Medium	ALPINE-CVE-2023-27537	curl@7.83.1-r2	8.0.1-r0
Medium	GHSA-mc97-99j4-vm2v	github.com/charmbracelet/soft-serve@v0.4.0	0.6.2
Medium	ALPINE-CVE-2023-28321	curl@7.83.1-r2	8.1.0-r0
Medium	GO-2022-1144	stdlib@go1.18.5	1.18.9
Medium	GHSA-xjvp-7243-rg9h	github.com/charmbracelet/wish@v0.5.0	no fix listed
Low	ALPINE-CVE-2023-27535	curl@7.83.1-r2	8.0.1-r0
Low	ALPINE-CVE-2023-27536	curl@7.83.1-r2	8.0.1-r0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0
Low	ALPINE-CVE-2023-38546	curl@7.83.1-r2	8.4.0-r0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0
Low	GHSA-r9px-m959-cxf4	github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4	5.13.0
Low	GHSA-mw99-9chc-xw7r	github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4	5.11.0
Low	GO-2023-1571	stdlib@go1.18.5	1.19.6
Low	GHSA-m445-w3xr-vp2f	github.com/charmbracelet/soft-serve@v0.4.0	0.7.5
Low	GHSA-vwq2-jx9q-9h9f	github.com/charmbracelet/soft-serve@v0.4.0	0.11.1
Low	GO-2023-2102	stdlib@go1.18.5	1.20.10
Low	ALPINE-CVE-2023-23915	curl@7.83.1-r2	7.83.1-r6
Low	ALPINE-CVE-2023-0465	openssl@1.1.1q-r0	1.1.1t-r2
Low	ALPINE-CVE-2022-39253	git@2.36.2-r0	2.36.3-r0
Low	GO-2022-0969	stdlib@go1.18.5	1.18.6
Low	ALPINE-CVE-2023-27538	curl@7.83.1-r2	8.0.1-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.13.0
Low	GO-2023-2185	stdlib@go1.18.5	1.20.11
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.3.1	5.9.0
Low	GHSA-33pr-m977-5w97	github.com/charmbracelet/soft-serve@v0.4.0	0.10.0
Low	GO-2023-1703	stdlib@go1.18.5	1.19.8
Low	GO-2026-4341	stdlib@go1.18.5	1.24.12
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4	5.19.2
Low	GO-2024-2887	stdlib@go1.18.5	1.21.11
Low	GO-2023-1704	stdlib@go1.18.5	1.19.8
Low	ALPINE-CVE-2025-26519	musl@1.2.3-r0	1.2.3-r4
Low	ALPINE-CVE-2023-22490	git@2.36.2-r0	2.36.5-r0
Low	ALPINE-CVE-2023-28322	curl@7.83.1-r2	8.1.0-r0
Low	GO-2023-1568	stdlib@go1.18.5	1.19.6
Low	GHSA-m3xc-h892-ggx6	github.com/go-git/go-billy/v5@v5.3.1	5.9.0
Low	GO-2022-1037	stdlib@go1.18.5	1.18.7
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4	5.19.2
Low	GO-2023-1987	stdlib@go1.18.5	1.19.12
Low	GHSA-j4jw-m6xr-fv6c	github.com/charmbracelet/soft-serve@v0.4.0	0.8.2
Low	GO-2023-1752	stdlib@go1.18.5	1.19.9
Low	ALPINE-CVE-2022-35252	curl@7.83.1-r2	7.83.1-r3
Low	GO-2023-1705	stdlib@go1.18.5	1.19.8
Low	GO-2023-1878	stdlib@go1.18.5	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0

Used by

1 chart

Chart	Version	Tag	Containers
soft-servealphani-helm-chartsVerified publisher	0.4.0	v0.4.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.