StackRadar

gitlab/gitlab-runner:v15.3.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gitlab/gitlab-runner

gitlab/gitlab-runner:v15.3.0 resolved to 860d4a3fec7a, scanned 14 Sept 2026: 646 findings, 10 critical, 3 on KEV; deployed by 1 chart, among them gitlab-runner.

Radar Score

9,1961022152462

646 findings on digest 860d4a3fec7a · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v15.3.0resolves to860d4a3fec7a1 chart6 days ago10221524629,196

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

462 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 860d4a3fec7a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGO-2021-0240stdlib@go1.16.21.15.13
LowUBUNTU-CVE-2026-54874openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm5
LowUBUNTU-CVE-2026-42766openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm4
LowGO-2021-0242stdlib@go1.16.21.15.13
LowGHSA-33pg-m6jh-5237github.com/docker/docker@v20.10.12+incompatible20.10.24
LowUBUNTU-CVE-2025-32990gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm1
LowUBUNTU-CVE-2022-39253git@1:2.25.1-1ubuntu3.51:2.25.1-1ubuntu3.6
LowUBUNTU-CVE-2024-50602expat@2.2.9-1ubuntu0.42.2.9-1ubuntu0.8
LowGO-2021-0264stdlib@go1.16.21.16.10
LowUBUNTU-CVE-2023-6918libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.5
LowGO-2022-0969stdlib@go1.17.91.18.6
LowUBUNTU-CVE-2025-6020pam@1.3.1-5ubuntu4.3no fix listed
LowUBUNTU-CVE-2023-27538curl@7.68.0-1ubuntu2.127.68.0-1ubuntu2.18
LowUBUNTU-CVE-2023-7104sqlite3@3.31.1-4ubuntu0.33.31.1-4ubuntu0.6
LowUBUNTU-CVE-2022-45142heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.4
LowGO-2021-0239stdlib@go1.16.21.15.13
LowUBUNTU-CVE-2026-86145pcre2@10.34-7no fix listed
LowGO-2021-0347stdlib@go1.16.21.16.15
LowUBUNTU-CVE-2024-8096curl@7.68.0-1ubuntu2.127.68.0-1ubuntu2.24
LowGO-2021-0245stdlib@go1.16.21.15.15
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac90.52.0
LowGO-2021-0319stdlib@go1.16.21.16.14
LowUBUNTU-CVE-2023-47039perl@5.30.0-9ubuntu0.2no fix listed
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.0.0-20200622213623-75b288015ac90.52.0
LowUBUNTU-CVE-2025-15281glibc@2.31-0ubuntu9.92.31-0ubuntu9.18+esm1
LowUBUNTU-CVE-2025-6297dpkg@1.19.7ubuntu3.2no fix listed
LowUBUNTU-CVE-2026-42011gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm3
LowUBUNTU-CVE-2024-12243gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12
LowGHSA-2wrh-6pvc-2jm9golang.org/x/net@v0.0.0-20220607020251-c690dde0001d0.13.0
LowUBUNTU-CVE-2022-41916heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.2
LowGHSA-2qjp-425j-52j9github.com/containerd/containerd@v1.4.131.5.16
LowUBUNTU-CVE-2026-9538perl@5.30.0-9ubuntu0.2no fix listed
LowGO-2022-0493stdlib@go1.17.91.17.10
LowUBUNTU-CVE-2025-6395gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm1
LowUBUNTU-CVE-2025-24528krb5@1.17-6ubuntu4.11.17-6ubuntu4.9
LowGO-2021-0317stdlib@go1.16.21.16.14
LowUBUNTU-CVE-2026-85091zlib@1:1.2.11.dfsg-2ubuntu1.3no fix listed
LowGO-2023-2185stdlib@go1.17.91.20.11
LowUBUNTU-CVE-2026-42497perl@5.30.0-9ubuntu0.2no fix listed
LowUBUNTU-CVE-2026-41992gzip@1.10-0ubuntu4.1no fix listed
LowUBUNTU-CVE-2023-7008systemd@245.4-4ubuntu3.17no fix listed
LowUBUNTU-CVE-2026-8932curl@7.68.0-1ubuntu2.127.68.0-1ubuntu2.25+esm7
LowUBUNTU-CVE-2024-12133libtasn1-6@4.16.0-24.16.0-2ubuntu0.1
LowUBUNTU-CVE-2026-8286curl@7.68.0-1ubuntu2.127.68.0-1ubuntu2.25+esm4
LowUBUNTU-CVE-2024-33602glibc@2.31-0ubuntu9.92.31-0ubuntu9.16
LowGHSA-p436-gjf2-799pgithub.com/docker/cli@v20.10.12+incompatible29.2.0
LowUBUNTU-CVE-2026-4046glibc@2.31-0ubuntu9.9no fix listed
LowUBUNTU-CVE-2026-0966libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.5+esm3
LowGO-2022-0537stdlib@go1.17.91.17.13
LowUBUNTU-CVE-2026-48959perl@5.30.0-9ubuntu0.2no fix listed

Used by

1 chart
ChartVersionTagContainers
gitlab-runnerslamdev0.0.1v15.3.02

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.