StackRadar

gollumorg/gollum:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gollumorg/gollum

gollumorg/gollum:latest resolved to 7cd5305a3cf7, scanned 14 Sept 2026: 253 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them gollum.

Radar Score

3,8000478171

253 findings on digest 7cd5305a3cf7 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to7cd5305a3cf71 chart8 days ago04781713,800

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

253 distinct on this digest

Findings for digest 7cd5305a3cf7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDSA-5142-1libxml2@2.9.4+dfsg1-7+deb10u12.9.4+dfsg1-7+deb10u4
LowGHSA-j4pr-3wm6-xx2ruri@0.10.00.12.5
LowGHSA-w9pc-fmgc-vxvwrack@2.2.32.2.19
LowDSA-5032-1djvulibre@3.5.27.1-103.5.27.1-10+deb10u1
LowDSA-4822-1p11-kit@0.23.15-20.23.15-2+deb10u1
LowDLA-3363-1pcre2@10.32-510.32-5+deb10u1
LowDLA-3239-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u5
LowDSA-5147-1dpkg@1.19.71.19.8
LowDLA-3682-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u5
LowDSA-4919-1lz4@1.8.3-11.8.3-1+deb10u1
LowGHSA-cgx6-hpwq-fhv5nokogiri@1.10.101.13.5
LowGHSA-fq42-c5rg-92c2nokogiri@1.10.101.13.2
LowGHSA-v569-hp3g-36wrrack@2.2.32.2.23
LowDLA-3626-1krb5@1.17-3+deb10u11.17-3+deb10u6
LowGHSA-228g-948r-83gxloofah@2.8.02.19.1
LowDSA-5174-1gnupg2@2.2.12-1+deb10u12.2.12-1+deb10u2
LowDSA-4933-1nettle@3.4.1-13.4.1-1+deb10u1
LowDSA-4930-1libwebp@0.6.1-20.6.1-2+deb10u1
LowGHSA-h2jq-g4cq-5ppqrack@2.2.32.2.23
LowGHSA-mr3q-g2mv-mr4qsinatra@2.1.04.2.0
LowGHSA-gh9q-2xrm-x6qvcgi@0.1.00.3.5.1
LowDLA-3114-1mariadb-10.3@1:10.3.27-0+deb10u11:10.3.36-0+deb10u1
LowDLA-3165-1expat@2.2.6-2+deb10u12.2.6-2+deb10u6
LowGHSA-8vqr-qjwx-82mwrack@2.2.32.2.23
LowDLA-3118-1unzip@6.0-23+deb10u16.0-23+deb10u3
LowDLA-3429-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u5
LowDLA-3294-1libarchive@3.3.3-4+deb10u13.3.3-4+deb10u3
LowDLA-3782-1util-linux@2.33.1-0.12.33.1-0.1+deb10u1
LowDLA-3586-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u4
LowDLA-3692-1curl@7.64.0-4+deb10u17.64.0-4+deb10u8
LowDLA-3119-1expat@2.2.6-2+deb10u12.2.6-2+deb10u5
LowDLA-3763-1curl@7.64.0-4+deb10u17.64.0-4+deb10u9
LowDLA-3263-1libtasn1-6@4.13-34.13-3+deb10u1
LowDLA-3758-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u9
LowDLA-3752-1libuv1@1.24.1-11.24.1-1+deb10u2
LowDLA-3398-1curl@7.64.0-4+deb10u17.64.0-4+deb10u6
LowDSA-4915-1postgresql-11@11.9-0+deb10u111.12-0+deb10u1
LowDSA-4869-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u2
LowDLA-3072-1postgresql-11@11.9-0+deb10u111.17-0+deb10u1
LowDSA-5006-1postgresql-11@11.9-0+deb10u111.14-0+deb10u1
LowGHSA-r995-q44h-hr64webrick@1.6.01.8.2
LowDLA-3070-1gnutls28@3.6.7-4+deb10u53.6.7-4+deb10u9
LowGHSA-4xqq-m2hx-25v8rexml@3.2.33.3.2
LowDLA-3236-1openexr@2.2.1-4.1+deb10u12.2.1-4.1+deb10u2
LowGHSA-c4rq-3m3g-8wgxnokogiri@1.10.101.19.3
LowDLA-3783-1expat@2.2.6-2+deb10u12.2.6-2+deb10u7
LowDLA-3240-1libde265@1.0.3-1+b11.0.3-1+deb10u1
LowDLA-3280-1libde265@1.0.3-1+b11.0.3-1+deb10u3
LowDLA-3764-1postgresql-11@11.9-0+deb10u111.22-0+deb10u2
LowGHSA-9cv2-cfxc-v4v2nokogiri@1.10.101.19.4

Used by

1 chart
ChartVersionTagContainers
gollumgeek-cookbookVerified publisher3.4.2latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.