StackRadar

flagsmith/flagsmith-api:v2.6.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of flagsmith/flagsmith-api

flagsmith/flagsmith-api:v2.6.0 resolved to fd58556339a4, scanned 14 Sept 2026: 147 findings, 0 critical; deployed by 1 chart, among them flagsmith.

Radar Score

2,216035292

147 findings on digest fd58556339a4 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.6.0resolves tofd58556339a41 chart8 days ago0352922,216

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

92 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest fd58556339a4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-cpwx-vrp4-4pq7jinja2@2.11.23.1.6
LowGHSA-8qcx-xf44-272xdjango@2.2.175.2.16
LowGHSA-mf9w-mj56-hr94python-dotenv@0.15.01.2.2
LowDLA-3377-1systemd@241-7~deb10u7241-7~deb10u9
LowGHSA-pq67-6m6q-mj2vurllib3@1.25.112.5.0
LowGHSA-65pc-fj4g-8rjxidna@2.103.15
LowGHSA-9wx4-h78v-vm56requests@2.24.02.32.0
LowGHSA-2m8g-3cmr-wg3wdjangorestframework@3.12.13.17.2
LowPYSEC-2025-183pyjwt@1.7.1no fix listed
LowGHSA-qccp-gfcp-xxvcurllib3@1.25.112.7.0
LowGHSA-crhf-3pfg-w68wdjango@2.2.175.2.16
LowGHSA-7xr5-9hcq-chf9django@2.2.174.2.22
LowGHSA-428g-f7cq-pgp5marshmallow@3.9.13.26.2
LowGHSA-g4mx-q9vg-27p4urllib3@1.25.111.26.18
LowGHSA-rrqc-c2jx-6jgvdjango@2.2.174.2.16
LowGHSA-27jp-wm6q-gp25sqlparse@0.4.10.5.4
LowGHSA-3496-9g83-7v6xsqlparse@0.4.10.6.0
LowPYSEC-2026-2275requests@2.24.02.33.0
LowGHSA-g47c-3xmw-q6m2djangorestframework@3.12.13.17.2
LowDLA-3474-1systemd@241-7~deb10u7241-7~deb10u10
LowGHSA-qg36-9jxh-fj25django-ses@1.0.33.5.0
LowGHSA-jp4c-xjxw-mgf9pip@21.0.126.1
LowDLA-3755-1tar@1.30+dfsg-61.30+dfsg-6+deb10u1
LowPYSEC-2026-177pyjwt@1.7.12.13.0
LowGHSA-cfqr-cjx5-5jcmsqlparse@0.4.10.6.0
LowPYSEC-2026-175pyjwt@1.7.12.13.0
LowGHSA-58qw-9mgm-455vpip@21.0.126.1
LowGHSA-3h9f-r86x-qvjxdjango@2.2.175.2.16
LowGHSA-923m-gv2p-w5qpdjango@2.2.175.2.15
LowGHSA-8cjm-8mp7-r2xfdjango@2.2.175.2.15
LowGHSA-h7pc-vwp9-298gdjango@2.2.175.2.15
LowDLA-3112-1bzip2@1.0.6-9.2~deb10u11.0.6-9.2~deb10u2
LowDLA-3134-1tzdata@2021a-0+deb10u12021a-0+deb10u7
LowDLA-3161-1tzdata@2021a-0+deb10u12021a-0+deb10u8
LowDLA-3366-1tzdata@2021a-0+deb10u12021a-0+deb10u10
LowDLA-3412-1tzdata@2021a-0+deb10u12021a-0+deb10u11
LowDLA-3482-1debian-archive-keyring@2019.1+deb10u12019.1+deb10u2
LowDLA-3684-1tzdata@2021a-0+deb10u12021a-0+deb10u12
LowDLA-3788-1tzdata@2021a-0+deb10u12024a-0+deb10u1
LowDSA-5085-2expat@2.2.6-2+deb10u12.2.6-2+deb10u4
LowGHSA-6vgw-5pg2-w6jppip@21.0.126.0
LowGHSA-g92j-qhmh-64v2sentry-sdk@0.19.41.45.1

Used by

1 chart
ChartVersionTagContainers
flagsmithone-acre-fundVerified publisher0.1.5v2.6.02

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.