gitlab/gitlab-runner:v15.3.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gitlab/gitlab-runner

gitlab/gitlab-runner:v15.3.0 resolved to 860d4a3fec7a, scanned 14 Sept 2026: 646 findings, 10 critical, 3 on KEV; deployed by 1 chart, among them gitlab-runner.

Radar Score

9,1961022152462

646 findings on digest 860d4a3fec7a · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v15.3.0resolves to	860d4a3fec7a	1 chart	6 days ago	1022152462	9,196

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

152 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 860d4a3fec7a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2022-43680	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.6
Medium	UBUNTU-CVE-2021-33560	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Medium	UBUNTU-CVE-2023-3446	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.20
Medium	UBUNTU-CVE-2016-20013	glibc@2.31-0ubuntu9.9	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	UBUNTU-CVE-2020-12062	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2021-41617	openssh@1:8.2p1-4ubuntu0.5	1:8.2p1-4ubuntu0.11
Medium	UBUNTU-CVE-2018-5709	krb5@1.17-6ubuntu4.1	no fix listed
Medium	UBUNTU-CVE-2024-28757	expat@2.2.9-1ubuntu0.4	no fix listed
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.4.0
Medium	UBUNTU-CVE-2023-31484	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.4
Medium	UBUNTU-CVE-2023-2953	openldap@2.4.49+dfsg-2ubuntu1.9	2.4.49+dfsg-2ubuntu1.10
Medium	UBUNTU-CVE-2016-20012	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2022-2509	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7
Medium	UBUNTU-CVE-2023-36054	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.4
Medium	UBUNTU-CVE-2023-52425	expat@2.2.9-1ubuntu0.4	no fix listed
Medium	GHSA-fxg5-wq6x-vr4w	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.1.1-0.20221104162952-702349b0e862
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781
Medium	UBUNTU-CVE-2011-10043	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	UBUNTU-CVE-2024-32004	git@1:2.25.1-1ubuntu3.5	1:2.25.1-1ubuntu3.12
Medium	UBUNTU-CVE-2022-2097	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.fips.16
Medium	UBUNTU-CVE-2024-33599	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.16
Medium	UBUNTU-CVE-2026-4176	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	UBUNTU-CVE-2024-0553	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.10
Medium	UBUNTU-CVE-2026-18924	curl@7.68.0-1ubuntu2.12	no fix listed
Medium	UBUNTU-CVE-2023-5678	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.21
Medium	UBUNTU-CVE-2025-9230	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.3	0.3.8
Medium	UBUNTU-CVE-2026-11856	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.25+esm6
Medium	UBUNTU-CVE-2017-20230	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	GO-2022-0433	stdlib@go1.16.2	1.17.9
Medium	UBUNTU-CVE-2021-3671	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1
Medium	UBUNTU-CVE-2021-37750	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.3
Medium	GO-2026-4887	github.com/docker/docker@v20.10.12+incompatible	no fix listed
Medium	UBUNTU-CVE-2023-0361	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.3	0.3.7
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Medium	UBUNTU-CVE-2025-59375	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.8+esm1
Medium	UBUNTU-CVE-2024-8176	expat@2.2.9-1ubuntu0.4	no fix listed
Medium	UBUNTU-CVE-2024-45492	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.7
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.27.1	1.33.0
Medium	UBUNTU-CVE-2024-0727	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.21
Medium	UBUNTU-CVE-2018-15919	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2021-44758	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3
Medium	UBUNTU-CVE-2022-43552	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.15
Medium	UBUNTU-CVE-2024-38428	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	UBUNTU-CVE-2023-26604	systemd@245.4-4ubuntu3.17	no fix listed
Medium	UBUNTU-CVE-2025-13151	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1

Used by

1 chart

Chart	Version	Tag	Containers
gitlab-runnerslamdev	0.0.1	v15.3.0	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.