digitalist/matomo:5.12.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of digitalist/matomo

digitalist/matomo:5.12.0 resolved to bc4aeeaea769, scanned 14 Sept 2026: 93 findings, 0 critical; deployed by 1 chart, among them matomo.

Radar Score

1,142021972

93 findings on digest bc4aeeaea769 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
5.12.0resolves to	bc4aeeaea769	1 chart	yesterday	021972	1,142

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

93 distinct on this digest

Findings for digest bc4aeeaea769 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-53803	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-p2gh-cfq4-4wjc	google/protobuf@v4.33.5	4.33.6
Low	ALPINE-CVE-2026-53794	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-3276	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0
Low	ALPINE-CVE-2024-37676	htop@3.5.1-r1	3.5.3-r0
Low	ALPINE-CVE-2026-53792	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53786	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53798	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-8328	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-70462	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-h35f-9h28-mq5c	setuptools@82.0.1	83.0.0
Low	ALPINE-CVE-2026-53788	rsync@3.4.3-r1	3.5.0-r0
Low	MAL-2023-1507	matomo-screenshot-testing@1.0.0	no fix listed
Low	GHSA-3qpq-r242-jqj7	phpseclib/phpseclib@3.0.36	3.0.52
Low	ALPINE-CVE-2026-70454	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-v5mv-p594-2x33	guzzlehttp/guzzle@7.10.0	7.15.2
Low	ALPINE-CVE-2025-15366	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-53785	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53799	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-h95v-h523-3mw8	guzzlehttp/guzzle@7.10.0	7.15.1
Low	ALPINE-CVE-2026-76957	expat@2.8.2-r0	2.8.4-r0
Low	GHSA-wm3w-8rrp-j577	guzzlehttp/guzzle@7.10.0	7.15.1
Low	GHSA-m557-wrgg-6rp4	phpseclib/phpseclib@3.0.36	3.0.54
Low	ALPINE-CVE-2026-4360	python3@3.14.5-r0	3.14.7-r0
Low	GHSA-cwxw-98qj-8qjx	guzzlehttp/guzzle@7.10.0	7.12.1
Low	GHSA-2x45-7fc3-mxwq	firebase/php-jwt@v6.10.1	7.0.0
Low	GHSA-f7vp-7xgx-4w4r	guzzlehttp/guzzle@7.10.0	7.15.2
Low	GHSA-f283-ghqc-fg79	guzzlehttp/guzzle@7.10.0	7.15.1
Low	GHSA-94pj-82f3-465w	guzzlehttp/guzzle@7.10.0	7.14.2
Low	GHSA-wpwq-4j6v-78m3	guzzlehttp/guzzle@7.10.0	7.12.1
Low	GHSA-34xg-wgjx-8xph	guzzlehttp/psr7@2.7.0	2.10.2
Low	GHSA-hq7v-mx3g-29hw	guzzlehttp/psr7@2.7.0	2.10.2
Low	ALPINE-CVE-2026-53797	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53800	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53796	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-vm85-hxw5-5432	guzzlehttp/psr7@2.11.0	2.12.1
Low	GHSA-c2w2-prh8-qm98	guzzlehttp/psr7@2.11.0	2.12.3
Low	ALPINE-CVE-2026-0864	python3@3.14.5-r0	3.14.7-r0
Low	GHSA-r854-jrxh-36qx	phpseclib/phpseclib@3.0.36	3.0.51
Low	GHSA-g446-98w2-8p5w	guzzlehttp/guzzle@7.10.0	7.12.3
Low	ALPINE-CVE-2026-6879	python3@3.14.5-r0	3.14.7-r0

Used by

1 chart

Chart	Version	Tag	Containers
matomodigitalist-open-cloud-matomo	12.0.20	5.12.0	14

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.