codecov/self-hosted-worker:24.4.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of codecov/self-hosted-worker
codecov/self-hosted-worker:24.4.1 resolved to 837f546b479b, scanned 14 Sept 2026: 155 findings, 2 critical; deployed by 1 chart, among them codecov.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
99 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 837f546b479b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | GHSA-933h-hp56-hf7m | django | 4.2.30 |
| Low | ALPINE-CVE-2024-37370 | krb5 | 1.20.2-r1 |
| Low | ALPINE-CVE-2025-0840 | binutils | 2.40-r8 |
| Low | GHSA-8p8v-wh79-9r56 | django | 4.2.29 |
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | GHSA-2mcm-79hx-8fxw | django | 4.2.28 |
| Low | GHSA-5mf9-h53q-7mhq | django | 4.2.30 |
| Low | ALPINE-CVE-2024-50602 | expat | 2.6.4-r0 |
| Low | GHSA-gmj6-6f8f-6699 | jinja2 | 3.1.5 |
| Low | ALPINE-CVE-2024-8096 | curl | 8.10.0-r0 |
| Low | GHSA-r6ph-v2qm-q3c2 | cryptography | 46.0.5 |
| Low | GHSA-795c-9xpc-xw6g | django | 4.2.15 |
| Low | GHSA-mvfq-ggxm-9mc5 | django | 4.2.30 |
| Low | GHSA-jh75-99hh-qvx9 | django | 4.2.15 |
| Low | GHSA-j5g9-f88f-gfj3 | httplib2 | 0.32.0 |
| Low | GHSA-f2ff-p2ww-7p4p | sqlparse | 0.6.0 |
| Low | GHSA-pwgv-4x5q-6m9f | sqlparse | 0.6.0 |
| Low | ALPINE-CVE-2024-4603 | openssl | 3.1.5-r0 |
| Low | ALPINE-CVE-2024-55549 | libxslt | 1.1.38-r1 |
| Low | ALPINE-CVE-2025-24855 | libxslt | 1.1.38-r1 |
| Low | GHSA-jwv3-5hgf-82ww | cryptography | 49.0.0 |
| Low | ALPINE-CVE-2024-0853 | curl | 8.6.0-r0 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | GHSA-xgmm-8j9v-c9wx | pyjwt | 2.13.0 |
| Low | GHSA-h75v-3vvj-5mfj | jinja2 | 3.1.4 |
| Low | ALPINE-CVE-2025-4207 | postgresql15 | 15.13-r0 |
| Low | GHSA-m4p7-r5rc-7g4j | pyasn1 | 0.6.4 |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | GHSA-8qvm-5x2c-j2w7 | protobuf | 4.25.8 |
| Low | GHSA-r836-hh6v-rg5g | django | 4.2.15 |
| Low | GHSA-8ppf-4f7h-5ppj | pyasn1 | 0.6.4 |
| Low | GHSA-hm4w-wwcw-mr6r | pyasn1 | 0.6.4 |
| Low | GHSA-vfmq-68hx-4jfw | lxml | 6.1.0 |
| Low | GHSA-x7q2-wr7g-xqmf | django | 4.2.14 |
| Low | GHSA-6426-9fv3-65x8 | django | 4.2.28 |
| Low | ALPINE-CVE-2024-10976 | postgresql15 | 15.9-r0 |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.4-r3 |
| Low | GHSA-prg7-hcfm-mfcr | sqlparse | 0.6.0 |
| Low | GHSA-8rrh-rw8j-w5fx | wheel | 0.46.2 |
| Low | GHSA-752w-5fwx-jx9f | pyjwt | 2.12.0 |
| Low | PYSEC-2026-3554 | cryptography | 49.0.0 |
| Low | GHSA-p3fp-8748-vqfq | django | 4.2.20 |
| Low | GHSA-34jh-p97f-mpxf | urllib3 | 1.26.19 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | GHSA-mq26-g339-26xf | pip | 23.3 |
| Low | GHSA-cpwx-vrp4-4pq7 | jinja2 | 3.1.6 |
| Low | GHSA-8qcx-xf44-272x | django | 5.2.16 |