gitlab/gitlab-runner:v15.3.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gitlab/gitlab-runner

gitlab/gitlab-runner:v15.3.0 resolved to 860d4a3fec7a, scanned 14 Sept 2026: 646 findings, 10 critical, 3 on KEV; deployed by 1 chart, among them gitlab-runner.

Radar Score

9,1961022152462

646 findings on digest 860d4a3fec7a · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v15.3.0resolves to	860d4a3fec7a	1 chart	6 days ago	1022152462	9,196

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

646 distinct on this digest

Findings for digest 860d4a3fec7a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2018-20796	glibc@2.31-0ubuntu9.9	no fix listed
Medium	UBUNTU-CVE-2025-26465	openssh@1:8.2p1-4ubuntu0.5	1:8.2p1-4ubuntu0.12
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
Medium	UBUNTU-CVE-2022-39260	git@1:2.25.1-1ubuntu3.5	1:2.25.1-1ubuntu3.6
Medium	UBUNTU-CVE-2021-39537	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1
Medium	UBUNTU-CVE-2019-1010023	glibc@2.31-0ubuntu9.9	no fix listed
Medium	UBUNTU-CVE-2022-1587	pcre2@10.34-7	10.34-7ubuntu0.1
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.7.0
Medium	UBUNTU-CVE-2023-0215	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.17
Medium	UBUNTU-CVE-2022-44640	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776	3.0.1
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.17.0
Medium	UBUNTU-CVE-2024-45490	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.7
Medium	UBUNTU-CVE-2021-43618	gmp@2:6.2.0+dfsg-4	2:6.2.0+dfsg-4ubuntu0.1
Medium	UBUNTU-CVE-2023-0464	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.18
Medium	UBUNTU-CVE-2023-27534	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.18
Medium	UBUNTU-CVE-2024-37371	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.6
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20201216223049-8b5274cf687f
Medium	UBUNTU-CVE-2023-27533	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.18
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-12ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2024-4741	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23
Medium	UBUNTU-CVE-2022-28321	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.4
Medium	UBUNTU-CVE-2026-3497	openssh@1:8.2p1-4ubuntu0.5	1:8.2p1-4ubuntu0.13+esm1
Medium	UBUNTU-CVE-2022-40674	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.5
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.34.0	1.79.3
Medium	UBUNTU-CVE-2020-35527	sqlite3@3.31.1-4ubuntu0.3	3.31.1-4ubuntu0.4
Medium	UBUNTU-CVE-2022-24975	git@1:2.25.1-1ubuntu3.5	no fix listed
Medium	UBUNTU-CVE-2026-19931	curl@7.68.0-1ubuntu2.12	no fix listed
Medium	GHSA-232p-vwff-86mp	github.com/docker/docker@v20.10.12+incompatible	20.10.24
Medium	UBUNTU-CVE-2022-43680	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.6
Medium	UBUNTU-CVE-2021-33560	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Medium	UBUNTU-CVE-2023-3446	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.20
Medium	UBUNTU-CVE-2016-20013	glibc@2.31-0ubuntu9.9	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	UBUNTU-CVE-2020-12062	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2021-41617	openssh@1:8.2p1-4ubuntu0.5	1:8.2p1-4ubuntu0.11
Medium	UBUNTU-CVE-2018-5709	krb5@1.17-6ubuntu4.1	no fix listed
Medium	UBUNTU-CVE-2024-28757	expat@2.2.9-1ubuntu0.4	no fix listed
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.4.0
Medium	UBUNTU-CVE-2023-31484	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.4
Medium	UBUNTU-CVE-2023-2953	openldap@2.4.49+dfsg-2ubuntu1.9	2.4.49+dfsg-2ubuntu1.10
Medium	UBUNTU-CVE-2016-20012	openssh@1:8.2p1-4ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2022-2509	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7
Medium	UBUNTU-CVE-2023-36054	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.4
Medium	UBUNTU-CVE-2023-52425	expat@2.2.9-1ubuntu0.4	no fix listed
Medium	GHSA-fxg5-wq6x-vr4w	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.1.1-0.20221104162952-702349b0e862
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781

Used by

1 chart

Chart	Version	Tag	Containers
gitlab-runnerslamdev	0.0.1	v15.3.0	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.