StackRadar

gollumorg/gollum:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gollumorg/gollum

gollumorg/gollum:latest resolved to 7cd5305a3cf7, scanned 14 Sept 2026: 253 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them gollum.

Radar Score

3,8000478171

253 findings on digest 7cd5305a3cf7 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to7cd5305a3cf71 chart8 days ago04781713,800

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

253 distinct on this digest

Findings for digest 7cd5305a3cf7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighGHSA-jc36-42cf-vqwjnokogiri@1.10.101.13.4
HighGHSA-59gp-qqm7-cw4jnokogiri@1.10.101.13.2
HighDLA-3570-1KEVlibwebp@0.6.1-20.6.1-2+deb10u3
HighDLA-3621-1KEVnghttp2@1.36.0-2+deb10u11.36.0-2+deb10u2
MediumDLA-3736-1unbound@1.9.0-2+deb10u21.9.0-2+deb10u4
MediumDSA-5169-1openssl@1.1.1d-0+deb10u41.1.1n-0+deb10u3
MediumDLA-3694-1openssh@1:7.9p1-10+deb10u21:7.9p1-10+deb10u4
MediumDLA-3357-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u2
MediumDLA-3145-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u4
MediumDLA-3807-1glibc@2.28-102.28-10+deb10u3
MediumDSA-4963-1openssl@1.1.1d-0+deb10u41.1.1d-0+deb10u7
MediumDLA-3804-1nghttp2@1.36.0-2+deb10u11.36.0-2+deb10u3
MediumDSA-4845-1openldap@2.4.47+dfsg-3+deb10u42.4.47+dfsg-3+deb10u5
MediumDSA-5139-1openssl@1.1.1d-0+deb10u41.1.1n-0+deb10u2
MediumGHSA-22f2-v57c-j9cxrack@2.2.32.2.8.1
MediumGHSA-jw9f-hh49-cvp9nokogiri@1.10.101.11.4
MediumDLA-3532-1openssh@1:7.9p1-10+deb10u21:7.9p1-10+deb10u3
MediumDLA-3449-1openssl@1.1.1d-0+deb10u41.1.1n-0+deb10u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u41.1.1d-0+deb10u8
MediumGHSA-5cqm-crxm-6qpvcgi@0.1.00.1.0.1
MediumGHSA-fp4w-jxhp-m23pbundler@2.1.42.2.10
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u42.4.47+dfsg-3+deb10u7
MediumDSA-4860-1openldap@2.4.47+dfsg-3+deb10u42.4.47+dfsg-3+deb10u6
MediumDSA-4875-1openssl@1.1.1d-0+deb10u41.1.1d-0+deb10u6
MediumDLA-3325-1openssl@1.1.1d-0+deb10u41.1.1n-0+deb10u4
MediumDLA-3282-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u7
MediumDLA-3844-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u9
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumDSA-4855-1openssl@1.1.1d-0+deb10u41.1.1d-0+deb10u5
MediumGHSA-52p9-v744-mwjjkramdown@2.3.02.3.1
MediumDSA-4851-1subversion@1.10.4-1+deb10u11.10.4-1+deb10u2
MediumGHSA-v4f8-2847-rwm7nokogiri@1.10.101.11.4
MediumDLA-3575-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u3
MediumDSA-5085-1expat@2.2.6-2+deb10u12.2.6-2+deb10u3
MediumGHSA-v5h6-c2hv-hv3rstringio@0.1.03.0.1.1
MediumGHSA-8cr8-4vfw-mr7hrexml@3.2.33.2.5
MediumDLA-3085-1curl@7.64.0-4+deb10u17.64.0-4+deb10u3
MediumGHSA-wq4h-7r42-5hrrrack@2.2.32.2.3.1
MediumGHSA-xh29-r2w5-wx8mnokogiri@1.10.101.13.6
MediumGHSA-gwfg-cqmg-cf8fwebrick@1.6.01.6.1
MediumGHSA-vc47-6rqg-c7f5cgi@0.1.00.1.0.2
MediumDLA-3432-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u2
MediumGHSA-crjr-9rc5-ghw8nokogiri@1.10.101.13.4
MediumDSA-4936-1libuv1@1.24.1-11.24.1-1+deb10u1
MediumDLA-3172-1libxml2@2.9.4+dfsg1-7+deb10u12.9.4+dfsg1-7+deb10u5
MediumDLA-3101-1libxslt@1.1.32-2.2~deb10u11.1.32-2.2~deb10u2
MediumGHSA-qg54-694p-wgppdate@3.0.03.0.2
MediumGHSA-4vf4-qmvg-mh7hcgi@0.1.00.1.0.1
MediumDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
MediumGHSA-hv5j-3h9f-99c2uri@0.10.00.10.0.1

Used by

1 chart
ChartVersionTagContainers
gollumgeek-cookbookVerified publisher3.4.2latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.