StackRadar

gollumorg/gollum:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gollumorg/gollum

gollumorg/gollum:latest resolved to 7cd5305a3cf7, scanned 14 Sept 2026: 253 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them gollum.

Radar Score

3,8000478171

253 findings on digest 7cd5305a3cf7 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to7cd5305a3cf71 chart8 days ago04781713,800

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

253 distinct on this digest

Findings for digest 7cd5305a3cf7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-qv7j-4883-hwh7rack@2.2.32.2.23
LowGHSA-6f62-3596-g6w7webrick@1.6.01.8.2
LowGHSA-gx8x-g87m-h5q6nokogiri@1.10.101.13.4
LowGHSA-v6gp-9mmm-c6p5nokogiri@1.10.101.13.4
LowDLA-3202-1libarchive@3.3.3-4+deb10u13.3.3-4+deb10u2
LowDLA-3602-1libx11@2:1.6.7-1+deb10u12:1.6.7-1+deb10u4
LowGHSA-vgpv-f759-9wx3rack@2.2.32.2.23
LowGHSA-wx95-c6cv-8532nokogiri@1.10.101.19.1
LowDLA-3110-1glib2.0@2.58.3-2+deb10u22.58.3-2+deb10u4
LowGHSA-7mqq-6cf9-v2qprack@2.2.32.2.23
LowGHSA-whrj-4476-wvmprack@2.2.32.2.22
LowGHSA-q4qf-9j86-f5mhrack@2.2.32.2.23
LowDLA-3297-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u6
LowDSA-4850-1libzstd@1.3.8+dfsg-31.3.8+dfsg-3+deb10u1
LowGHSA-xxx9-3xcr-gjj3nokogiri@1.10.101.13.4
LowDLA-3333-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u7
LowDLA-3474-1systemd@241-7~deb10u5241-7~deb10u10
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.1.71.3.7
LowDSA-4859-1libzstd@1.3.8+dfsg-31.3.8+dfsg-3+deb10u2
LowDLA-3771-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u4
LowDLA-3772-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u7
LowGHSA-9wjq-cp2p-hrgfloofah@2.8.02.25.2
LowDLA-3755-1tar@1.30+dfsg-61.30+dfsg-6+deb10u1
LowGHSA-vpfw-47h7-xj4grack@2.2.32.2.14
LowGHSA-22h5-pq3x-2gf2uri@0.10.00.11.3
LowGHSA-q2ww-5357-x388rack@2.2.32.2.23
LowGHSA-54rr-7fvw-6x8frack@2.2.32.2.8.1
LowDLA-3579-1elfutils@0.176-1.10.176-1.1+deb10u1
LowGHSA-rqv2-275x-2jq5rack@2.2.32.2.6.1
LowGHSA-xj5v-6v4g-jfw6rack@2.2.32.2.8.1
LowGHSA-93pm-5p5f-3ghxrack@2.2.32.2.6.1
LowGHSA-c6qg-cjj8-47qprack@2.2.32.2.6.4
LowDLA-3112-1bzip2@1.0.6-9.2~deb10u11.0.6-9.2~deb10u2
LowDLA-3114-2mariadb-10.3@1:10.3.27-0+deb10u11:10.3.36-0+deb10u2
LowDLA-3134-1tzdata@2020d-0+deb10u12021a-0+deb10u7
LowDLA-3161-1tzdata@2020d-0+deb10u12021a-0+deb10u8
LowDLA-3189-1postgresql-11@11.9-0+deb10u111.18-0+deb10u1
LowDLA-3239-2git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u6
LowDLA-3316-1postgresql-11@11.9-0+deb10u111.19-0+deb10u1
LowDLA-3337-1mariadb-10.3@1:10.3.27-0+deb10u11:10.3.38-0+deb10u1
LowDLA-3357-2imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u4
LowDLA-3366-1tzdata@2020d-0+deb10u12021a-0+deb10u10
LowDLA-3412-1tzdata@2020d-0+deb10u12021a-0+deb10u11
LowDLA-3482-1debian-archive-keyring@2019.12019.1+deb10u2
LowDLA-3684-1tzdata@2020d-0+deb10u12021a-0+deb10u12
LowDLA-3788-1tzdata@2020d-0+deb10u12024a-0+deb10u1
LowDSA-5085-2expat@2.2.6-2+deb10u12.2.6-2+deb10u4
LowGHSA-8678-w3jw-xfc2nokogiri@1.10.101.19.4
LowGHSA-vvfq-8hwr-qm4mnokogiri@1.10.101.18.3
LowGHSA-6wx8-w4f5-wwcrconcurrent-ruby@1.1.71.3.7

Used by

1 chart
ChartVersionTagContainers
gollumgeek-cookbookVerified publisher3.4.2latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.