deluan/navidrome:0.49.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of deluan/navidrome
deluan/navidrome:0.49.3 resolved to 11a24da08977, scanned 14 Sept 2026: 226 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them Navidrome.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
174 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 11a24da08977 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2025-69420 | openssl | 3.0.19-r0 |
| Low | ALPINE-CVE-2023-43615 | mbedtls | 2.28.5-r0 |
| Low | GHSA-f238-rggp-82m3 | github.com/ | 0.56.0 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-9phm-fm57-rhg8 | golang.org/ | 0.18.0 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-wr3p-r5fj-wf97 | github.com/ | 2.2.1 |
| Low | GO-2023-1571 | stdlib | 1.19.6 |
| Low | GHSA-x92r-3vfx-4cv3 | golang.org/ | 0.10.0 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | ALPINE-CVE-2023-0466 | openssl | 3.0.8-r3 |
| Low | GHSA-j3p8-6mrq-6g7h | golang.org/ | 0.10.0 |
| Low | ALPINE-CVE-2023-0465 | openssl | 3.0.8-r2 |
| Low | ALPINE-CVE-2025-69419 | openssl | 3.0.19-r0 |
| Low | ALPINE-CVE-2024-50602 | expat | 2.6.4-r0 |
| Low | ALPINE-CVE-2023-43787 | libx11 | 1.8.7-r0 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | ALPINE-CVE-2023-1255 | openssl | 3.0.8-r4 |
| Low | GHSA-2wrh-6pvc-2jm9 | golang.org/ | 0.13.0 |
| Low | GHSA-hj3v-m684-v259 | github.com/ | 2.0.21 |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | ALPINE-CVE-2024-4603 | openssl | 3.0.13-r0 |
| Low | GHSA-q675-qj96-32m9 | golang.org/ | 0.41.0 |
| Low | GO-2023-1703 | stdlib | 1.19.8 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | GO-2023-1704 | stdlib | 1.19.8 |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.3-r6 |
| Low | GHSA-hrmx-8jjv-g758 | github.com/ | no fix listed |
| Low | ALPINE-CVE-2024-40897 | orc | 0.4.39-r0 |
| Low | GHSA-9j3m-fr7q-jxfw | github.com/ | 2.3.4 |
| Low | GHSA-7f9x-gw85-8grf | github.com/ | 2.0.18 |
| Low | GO-2023-1568 | stdlib | 1.19.6 |
| Low | ALPINE-CVE-2023-43785 | libx11 | 1.8.7-r0 |
| Low | GO-2023-1987 | stdlib | 1.19.12 |
| Low | GO-2023-1752 | stdlib | 1.19.9 |
| Low | GO-2023-1705 | stdlib | 1.19.8 |
| Low | GO-2023-1878 | stdlib | 1.19.11 |
| Low | ALPINE-CVE-2023-2975 | openssl | 3.0.9-r2 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | GO-2023-1702 | stdlib | 1.19.8 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | GO-2023-2375 | stdlib | 1.20.0 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | GO-2023-1569 | stdlib | 1.19.6 |
| Low | GO-2023-2382 | stdlib | 1.20.12 |
| Low | ALPINE-CVE-2023-43786 | libx11 | 1.8.7-r0 |