StackRadar

goharbor/harbor-core:dev container image

Docker Hub

Scanned 29 Sept 2026

Deployed by 1 of 17,939 indexed charts (latest versions) at this tag.Docker Hub all tags of goharbor/harbor-core

goharbor/harbor-core:dev resolved to 3dc58ddedce5, scanned 29 Sept 2026: 27 findings, 0 critical; deployed by 1 chart, among them sikalabs-harbor-master-snapshot.

Radar Score

20600225

27 findings on digest 3dc58ddedce5 · scanned 29 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
devresolves to3dc58ddedce51 chartyesterday00225206

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

25 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 3dc58ddedce5 as scanned on 29 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 29 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-f2g3-hh2r-cwgcgithub.com/distribution/distribution@v2.8.2+incompatibleno fix listed
LowGHSA-3p65-76g6-3w7rgithub.com/distribution/distribution@v2.8.2+incompatibleno fix listed
LowGHSA-6pjf-3r9x-m592github.com/distribution/distribution@v2.8.2+incompatibleno fix listed
LowGHSA-rq77-p4h8-4crwgithub.com/gorilla/csrf@v1.7.21.7.3
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.82.11.83.1
LowGHSA-82ff-hg59-8x73github.com/gorilla/csrf@v1.7.2no fix listed
LowGO-2026-5026stdlib@go1.26.41.25.13
LowGO-2026-5942stdlib@go1.26.41.26.6
LowGO-2026-5972stdlib@go1.26.41.25.13
LowGO-2026-6088stdlib@go1.26.41.25.13
LowGO-2026-6089stdlib@go1.26.41.25.13
LowGO-2026-6090stdlib@go1.26.41.25.13
LowGO-2026-6218stdlib@go1.26.41.25.13
LowGO-2026-6355golang.org/x/crypto@v0.55.00.56.0
LowGHSA-w8rr-5gcm-pp58go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.34.01.43.0
LowGO-2026-6354golang.org/x/crypto@v0.55.00.56.0
LowGO-2026-5856stdlib@go1.26.41.25.12
LowGO-2025-3460github.com/distribution/distribution@v2.8.2+incompatibleno fix listed
LowGHSA-hr2v-4r36-88hrhelm.sh/helm/v3@v3.18.53.20.2
LowGO-2026-6091stdlib@go1.26.41.25.13
LowGO-2026-4970stdlib@go1.26.41.25.12
LowGO-2026-5932golang.org/x/crypto@v0.55.0no fix listed
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/sdk@v1.44.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.34.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.34.01.45.0

Used by

1 chart
ChartVersionTagContainers
sikalabs-harbor-master-snapshotsikalabs2023.6.20dev1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 29 Sept 2026 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.