codecov/self-hosted-api:24.4.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of codecov/self-hosted-api
codecov/self-hosted-api:24.4.1 resolved to 0475cb1c3136, scanned 14 Sept 2026: 182 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them codecov.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
62 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 0475cb1c3136 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2024-7264 | curl | 8.9.1-r0 |
| Medium | ALPINE-CVE-2024-5535 | openssl | 3.1.6-r0 |
| Medium | GHSA-5hgc-2vfp-mqvc | django | 4.2.16 |
| Medium | ALPINE-CVE-2024-10979 | postgresql15 | 15.9-r0 |
| Medium | GHSA-8j24-cjrq-gr2m | django | 4.2.21 |
| Medium | ALPINE-CVE-2024-6197 | curl | 8.9.0-r0 |
| Medium | GHSA-w3h3-4rj7-4ph4 | gunicorn | 22.0.0 |
| Medium | PYSEC-2024-187 | virtualenv | 20.26.6 |
| Medium | ALPINE-CVE-2023-5363 | openssl | 3.1.4-r0 |
| Medium | ALPINE-CVE-2024-37371 | krb5 | 1.20.2-r1 |
| Medium | GHSA-2m57-hf25-phgg | sqlparse | 0.5.0 |
| Medium | GHSA-m9g8-fxxm-xg86 | django | 4.2.17 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | ALPINE-CVE-2024-45492 | expat | 2.6.3-r0 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | ALPINE-CVE-2024-4741 | openssl | 3.1.6-r0 |
| Medium | GHSA-pv4p-cwwg-4rph | django | 4.2.15 |
| Medium | GHSA-r9hx-vwmv-q579 | setuptools | 65.5.1 |
| Medium | ALPINE-CVE-2024-45491 | expat | 2.6.3-r0 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | ALPINE-CVE-2023-3446 | openssl | 3.1.1-r3 |
| Medium | PYSEC-2025-109 | django | 4.2.27 |
| Medium | ALPINE-CVE-2024-28757 | expat | 2.6.2-r0 |
| Medium | GHSA-qw25-v68c-qjf3 | django | 4.2.26 |
| Medium | ALPINE-CVE-2023-36054 | krb5 | 1.20.2-r0 |
| Medium | ALPINE-CVE-2023-52425 | expat | 2.6.0-r0 |
| Medium | ALPINE-CVE-2024-45490 | expat | 2.6.3-r0 |
| Medium | ALPINE-CVE-2023-5678 | openssl | 3.1.4-r1 |
| Medium | ALPINE-CVE-2024-7348 | postgresql15 | 15.8-r0 |
| Medium | ALPINE-CVE-2023-6129 | openssl | 3.1.4-r3 |
| Medium | GHSA-gvg8-93h5-g6qq | django | 4.2.28 |
| Medium | PYSEC-2025-106 | django | 4.2.25 |
| Medium | GHSA-8498-2h75-472j | django | 4.2.17 |
| Medium | PYSEC-2024-60 | idna | 3.7 |
| Medium | ALPINE-CVE-2024-8176 | expat | 2.7.0-r0 |
| Medium | ALPINE-CVE-2024-9681 | curl | 8.11.0-r0 |
| Medium | ALPINE-CVE-2024-0727 | openssl | 3.1.4-r5 |
| Medium | GHSA-9v9h-cgj8-h64p | cryptography | 42.0.2 |
| Medium | GHSA-qg2p-9jwr-mmqf | django | 4.2.14 |
| Medium | ALPINE-CVE-2025-0725 | curl | 8.12.0-r0 |
| Medium | ALPINE-CVE-2023-7104 | sqlite | 3.41.2-r3 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | ALPINE-CVE-2023-6237 | openssl | 3.1.4-r4 |
| Medium | ALPINE-CVE-2024-9143 | openssl | 3.1.7-r1 |
| Medium | ALPINE-CVE-2023-3817 | openssl | 3.1.2-r0 |
| Medium | ALPINE-CVE-2025-0665 | curl | 8.12.0-r0 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | GHSA-vqfr-h8mv-ghfj | h11 | 0.16.0 |
| Medium | PYSEC-2026-43 | django | 4.2.28 |