gitlab/gitlab-runner:v15.3.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gitlab/gitlab-runner

gitlab/gitlab-runner:v15.3.0 resolved to 860d4a3fec7a, scanned 14 Sept 2026: 646 findings, 10 critical, 3 on KEV; deployed by 1 chart, among them gitlab-runner.

Radar Score

9,1961022152462

646 findings on digest 860d4a3fec7a · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v15.3.0resolves to	860d4a3fec7a	1 chart	6 days ago	1022152462	9,196

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

646 distinct on this digest

Findings for digest 860d4a3fec7a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2023-25815	git@1:2.25.1-1ubuntu3.5	1:2.25.1-1ubuntu3.11
Low	UBUNTU-CVE-2026-41080	expat@2.2.9-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2025-4878	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm2
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4	0.44.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2026-35387	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.30+dfsg-7ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-73281	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2025-6141	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
Low	GO-2022-0379	github.com/docker/distribution@v2.7.0+incompatible	2.8.0+incompatible
Low	GO-2022-1107	github.com/docker/docker@v20.10.12+incompatible	20.10.20+incompatible
Low	GO-2023-2153	google.golang.org/grpc@v1.34.0	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.4.13	1.6.26
Low	GO-2024-2846	github.com/containerd/containerd@v1.4.13	1.5.11
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.34.0	1.82.1
Low	GO-2026-6278	github.com/gorilla/websocket@v1.4.2	1.5.3
Low	USN-5376-4	git@1:2.25.1-1ubuntu3.5	1:2.25.1-1ubuntu3.14+esm4
Low	USN-5376-5	git@1:2.25.1-1ubuntu3.5	1:2.25.1-1ubuntu3.14+esm5
Low	USN-6105-1	ca-certificates@20211016~20.04.1	20230311ubuntu0.20.04.1
Low	USN-6279-1	openssh@1:8.2p1-4ubuntu0.5	1:8.2p1-4ubuntu0.9
Low	USN-6663-1	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.22
Low	USN-7034-1	ca-certificates@20211016~20.04.1	20240203~20.04.1
Low	USN-8091-1	util-linux@2.34-0.1ubuntu9.3	2.34-0.1ubuntu9.6+esm1
Low	USN-8543-2	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm4
Low	USN-8688-1	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1
Low	UBUNTU-CVE-2025-61985	openssh@1:8.2p1-4ubuntu0.5	1:8.2p1-4ubuntu0.13+esm1
Low	UBUNTU-CVE-2026-0965	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v20.10.12+incompatible	25.0.13
Low	UBUNTU-CVE-2025-66382	expat@2.2.9-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-24515	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.8+esm1
Low	UBUNTU-CVE-2026-40228	systemd@245.4-4ubuntu3.17	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.2.9-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2023-4016	procps@2:3.3.16-1ubuntu2.3	2:3.3.16-1ubuntu2.4
Low	UBUNTU-CVE-2025-30258	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.4
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.7-3	1:3.7-3ubuntu0.1~esm1
Low	GHSA-77vh-xpmg-72qh	github.com/opencontainers/image-spec@v1.0.1	1.0.2
Low	GHSA-qq97-vm5h-rrhg	github.com/docker/distribution@v2.7.0+incompatible	2.8.0
Low	UBUNTU-CVE-2026-0967	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	UBUNTU-CVE-2026-35388	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-73283	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-5958	sed@4.7-1	4.7-1ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-6368	glibc@2.31-0ubuntu9.9	no fix listed
Low	GHSA-c9cp-9c75-9v8c	github.com/containerd/containerd@v1.4.13	1.5.11
Low	GHSA-vp35-85q5-9f25	github.com/docker/docker@v20.10.12+incompatible	20.10.20

Used by

1 chart

Chart	Version	Tag	Containers
gitlab-runnerslamdev	0.0.1	v15.3.0	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.