StackRadar

gollumorg/gollum:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gollumorg/gollum

gollumorg/gollum:latest resolved to 7cd5305a3cf7, scanned 14 Sept 2026: 253 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them gollum.

Radar Score

3,8000478171

253 findings on digest 7cd5305a3cf7 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to7cd5305a3cf71 chart8 days ago04781713,800

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

253 distinct on this digest

Findings for digest 7cd5305a3cf7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDSA-5135-1postgresql-11@11.9-0+deb10u111.16-0+deb10u1
MediumGHSA-qp49-3pvw-x4m5sinatra@2.1.02.2.0
MediumGHSA-hxqx-xwvh-44m2rack@2.2.32.2.3.1
MediumGHSA-fj7f-vq84-fh43bundler@2.1.42.2.33
MediumGHSA-3h57-hmj3-gj3prack@2.2.32.2.6.3
MediumDLA-3559-1libssh2@1.8.0-2.11.8.0-2.1+deb10u1
MediumDLA-3477-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u5
MediumGHSA-286v-pcf5-25rcnokogiri@1.10.101.11.4
MediumGHSA-486f-hjj9-9vhhloofah@2.8.02.19.1
MediumGHSA-65f5-mfpf-vfhjrack@2.2.32.2.6.2
MediumDSA-4920-1libx11@2:1.6.7-1+deb10u12:1.6.7-1+deb10u2
MediumDSA-4944-1krb5@1.17-3+deb10u11.17-3+deb10u2
MediumDSA-4881-1curl@7.64.0-4+deb10u17.64.0-4+deb10u2
MediumGHSA-2rr5-8q37-2w7hnokogiri@1.10.101.12.5
MediumDSA-5119-1subversion@1.10.4-1+deb10u11.10.4-1+deb10u3
MediumGHSA-2rxp-v6pw-ch6mrexml@3.2.33.3.9
MediumDSA-4942-1systemd@241-7~deb10u5241-7~deb10u8
MediumGHSA-r55c-59qm-vjw6rexml@3.2.33.3.3
MediumGHSA-g857-hhfv-j68wzlib@1.1.03.0.1
MediumGHSA-ggxm-pgc9-g7fprdoc@6.2.16.2.1.1
MediumGHSA-5866-49gr-22v4rexml@3.2.33.3.3
MediumGHSA-gjh7-p2fx-99vxrack@2.2.32.2.14
MediumGHSA-7wqh-767x-r66vrack@2.2.32.2.13
MediumGHSA-3x8r-x6xp-q4vmloofah@2.8.02.19.1
MediumGHSA-2x8x-jmrp-phxwsinatra@2.1.02.2.3
MediumDLA-3530-1openssl@1.1.1d-0+deb10u41.1.1n-0+deb10u6
MediumDLA-3213-1krb5@1.17-3+deb10u11.17-3+deb10u5
MediumDLA-3613-1curl@7.64.0-4+deb10u17.64.0-4+deb10u7
MediumGHSA-p543-xpfm-54cprack@2.2.32.2.19
MediumGHSA-wpv5-97wm-hp9crack@2.2.32.2.19
MediumDLA-3175-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u4
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
LowGHSA-7g2v-jj9q-g3rgrack@2.2.32.2.11
LowDLA-3614-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u6
LowDSA-5122-1gzip@1.9-31.9-3+deb10u1
LowDSA-5123-1xz-utils@5.2.4-15.2.4-1+deb10u1
LowDSA-4882-1openjpeg2@2.3.0-2+deb10u12.3.0-2+deb10u2
LowDSA-5073-1expat@2.2.6-2+deb10u12.2.6-2+deb10u2
LowGHSA-vg3r-rm7w-2xghrexml@3.2.33.2.7
LowGHSA-mq66-vcfc-8246mercurial@4.8.24.9
LowGHSA-h8w8-99g7-qmvjconcurrent-ruby@1.1.71.3.7
LowGHSA-mxw3-3hh2-x2mhrack@2.2.32.2.22
LowDLA-3288-1curl@7.64.0-4+deb10u17.64.0-4+deb10u4
LowDLA-3651-1postgresql-11@11.9-0+deb10u111.22-0+deb10u1
LowGHSA-6xw4-3v39-52mmrack@2.2.32.2.20
LowDSA-5087-1cyrus-sasl2@2.1.27+dfsg-1+deb10u12.1.27+dfsg-1+deb10u2
LowGHSA-hww2-5g85-429muri@0.10.00.10.0.3
LowGHSA-vmwr-mc7x-5vc3rexml@3.2.33.3.6
LowGHSA-8cgq-6mh2-7j6vrack@2.2.32.2.12
LowGHSA-625h-95r8-8xpmrack@2.2.32.2.18

Used by

1 chart
ChartVersionTagContainers
gollumgeek-cookbookVerified publisher3.4.2latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.