codecov/self-hosted-worker:24.4.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of codecov/self-hosted-worker
codecov/self-hosted-worker:24.4.1 resolved to 837f546b479b, scanned 14 Sept 2026: 155 findings, 2 critical; deployed by 1 chart, among them codecov.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
48 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 837f546b479b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2024-7264 | curl | 8.9.1-r0 |
| Medium | ALPINE-CVE-2024-5535 | openssl | 3.1.6-r0 |
| Medium | GHSA-5hgc-2vfp-mqvc | django | 4.2.16 |
| Medium | ALPINE-CVE-2024-10979 | postgresql15 | 15.9-r0 |
| Medium | GHSA-8j24-cjrq-gr2m | django | 4.2.21 |
| Medium | ALPINE-CVE-2024-6197 | curl | 8.9.0-r0 |
| Medium | PYSEC-2024-187 | virtualenv | 20.26.6 |
| Medium | ALPINE-CVE-2024-37371 | krb5 | 1.20.2-r1 |
| Medium | GHSA-2m57-hf25-phgg | sqlparse | 0.5.0 |
| Medium | GHSA-m9g8-fxxm-xg86 | django | 4.2.17 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | ALPINE-CVE-2024-45492 | expat | 2.6.3-r0 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | ALPINE-CVE-2024-4741 | openssl | 3.1.6-r0 |
| Medium | GHSA-pv4p-cwwg-4rph | django | 4.2.15 |
| Medium | ALPINE-CVE-2024-45491 | expat | 2.6.3-r0 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | PYSEC-2025-109 | django | 4.2.27 |
| Medium | GHSA-qw25-v68c-qjf3 | django | 4.2.26 |
| Medium | ALPINE-CVE-2023-36054 | krb5 | 1.20.2-r0 |
| Medium | ALPINE-CVE-2024-45490 | expat | 2.6.3-r0 |
| Medium | ALPINE-CVE-2024-7348 | postgresql15 | 15.8-r0 |
| Medium | GHSA-gvg8-93h5-g6qq | django | 4.2.28 |
| Medium | PYSEC-2025-106 | django | 4.2.25 |
| Medium | GHSA-8498-2h75-472j | django | 4.2.17 |
| Medium | PYSEC-2024-60 | idna | 3.7 |
| Medium | ALPINE-CVE-2024-8176 | expat | 2.7.0-r0 |
| Medium | ALPINE-CVE-2024-9681 | curl | 8.11.0-r0 |
| Medium | GHSA-qg2p-9jwr-mmqf | django | 4.2.14 |
| Medium | ALPINE-CVE-2025-0725 | curl | 8.12.0-r0 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | ALPINE-CVE-2024-9143 | openssl | 3.1.7-r1 |
| Medium | ALPINE-CVE-2025-0665 | curl | 8.12.0-r0 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | GHSA-vqfr-h8mv-ghfj | h11 | 0.16.0 |
| Medium | PYSEC-2026-43 | django | 4.2.28 |
| Medium | PYSEC-2026-45 | django | 4.2.28 |
| Medium | PYSEC-2026-52 | django | 4.2.30 |
| Medium | ALPINE-CVE-2025-31115 | xz | 5.4.3-r1 |
| Medium | ALPINE-CVE-2024-2379 | curl | 8.7.1-r0 |
| Medium | GHSA-9jmf-237g-qf46 | django | 4.2.14 |
| Medium | PYSEC-2026-3717 | django | 5.2.17 |
| Medium | GHSA-wj6h-64fc-37mp | ecdsa | no fix listed |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | GHSA-qcgg-j2x8-h9g8 | django | 4.2.18 |
| Medium | ALPINE-CVE-2024-2466 | curl | 8.7.1-r0 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |