StackRadar

goharbor/harbor-registryctl:dev container image

Docker Hub

Scanned 29 Sept 2026

Deployed by 1 of 17,939 indexed charts (latest versions) at this tag.Docker Hub all tags of goharbor/harbor-registryctl

goharbor/harbor-registryctl:dev resolved to b8fa35c3d36e, scanned 29 Sept 2026: 51 findings, 0 critical; deployed by 1 chart, among them sikalabs-harbor-master-snapshot.

Radar Score

496001239

51 findings on digest b8fa35c3d36e · scanned 29 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
devresolves tob8fa35c3d36e1 chartyesterday001239496

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

12 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest b8fa35c3d36e as scanned on 29 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 29 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-cg3q-j54f-5p7pgithub.com/prometheus/client_golang@v0.9.0-pre1.0.20180209125602-c332b6f63c061.11.1
MediumGHSA-h62f-wm92-2cmwgithub.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty2.7.0-rc.0
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a1.79.3
MediumGHSA-86r9-39j9-99wpgopkg.in/square/go-jose.v1@v1.0.11.0.4
MediumGHSA-w73w-5m7g-f7qcgithub.com/dgrijalva/jwt-go@v3.2.0+incompatibleno fix listed
MediumGHSA-77gc-fj98-665hgopkg.in/square/go-jose.v1@v1.0.11.1.0
MediumGHSA-p55x-7x9v-q8m4github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f1.0.4
MediumGHSA-9jcx-pr2f-qvq5github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f1.0.10
MediumGHSA-44r7-7p62-q3frgithub.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f1.1.25
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.82.11.82.2
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.82.11.83.1
MediumGHSA-hqxw-f8mx-cpmwgithub.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty2.8.2-beta.1

Used by

1 chart
ChartVersionTagContainers
sikalabs-harbor-master-snapshotsikalabs2023.6.20dev1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 29 Sept 2026 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.