grafana/oncall:v1.13.11 container image

Docker Hub

Scanned 19 Sept 2026

Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.Docker Hub all tags of grafana/oncall

grafana/oncall:v1.13.11 resolved to 159b6b836fed, scanned 19 Sept 2026: 210 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them oncall-hobby.

Radar Score

2,7802550153

210 findings on digest 159b6b836fed · scanned 19 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v1.13.11resolves to	159b6b836fed	1 chart	today	2550153	2,780

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

153 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 159b6b836fed as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	PYSEC-2026-2132	click@8.1.7	8.3.3
Low	ALPINE-CVE-2025-46835	git@2.45.2-r0	2.45.4-r0
Low	GHSA-933h-hp56-hf7m	django@4.2.17	4.2.30
Low	ALPINE-CVE-2025-0840	binutils@2.42-r0	2.42-r1
Low	GHSA-7cx3-6m66-7c5m	tornado@6.4.2	6.5
Low	GHSA-8p8v-wh79-9r56	django@4.2.17	4.2.29
Low	ALPINE-CVE-2026-6477	postgresql16@16.3-r0	16.14-r0
Low	ALPINE-CVE-2024-9287	python3@3.12.6-r0	3.12.8-r0
Low	ALPINE-CVE-2025-8715	postgresql16@16.3-r0	16.10-r0
Low	ALPINE-CVE-2026-2007	postgresql16@16.3-r0	16.12-r0
Low	GHSA-gm37-52c6-37mw	pymdown-extensions@10.0	11.0.1
Low	ALPINE-CVE-2026-6637	postgresql16@16.3-r0	16.14-r0
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.1.4	3.1.5
Low	GHSA-2mcm-79hx-8fxw	django@4.2.17	4.2.28
Low	GHSA-5mf9-h53q-7mhq	django@4.2.17	4.2.30
Low	GHSA-mgf9-4vpg-hj56	tornado@6.4.2	6.5.6
Low	GHSA-5wmx-573v-2qwq	markdown@3.5.2	3.8.1
Low	ALPINE-CVE-2025-27614	git@2.45.2-r0	2.45.4-r0
Low	GHSA-c98p-7wgm-6p64	tornado@6.4.2	6.5.3
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r0	3.3.6-r0
Low	ALPINE-CVE-2026-31789	openssl@3.3.2-r0	3.3.7-r0
Low	GHSA-jhmp-mqwm-3gq8	tornado@6.4.2	6.5.3
Low	ALPINE-CVE-2026-6475	postgresql16@16.3-r0	16.14-r0
Low	GHSA-2wc2-fm75-p42x	soupsieve@2.5	2.8.4
Low	GHSA-836r-79rf-4m37	soupsieve@2.5	2.8.4
Low	ALPINE-CVE-2025-29087	sqlite@3.45.3-r1	3.45.3-r2
Low	ALPINE-CVE-2024-50602	expat@2.6.3-r0	2.6.4-r0
Low	GHSA-gmj6-6f8f-6699	jinja2@3.1.4	3.1.5
Low	ALPINE-CVE-2025-46334	git@2.45.2-r0	2.45.4-r0
Low	GHSA-6v7p-g79w-8964	msgpack@1.0.7	1.2.1
Low	GHSA-3x9g-8vmp-wqvf	tornado@6.4.2	6.5.6
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r1	1.3.2-r0
Low	ALPINE-CVE-2024-8096	curl@8.9.1-r2	8.10.0-r0
Low	ALPINE-CVE-2026-6479	postgresql16@16.3-r0	16.14-r0
Low	ALPINE-CVE-2026-45186	expat@2.6.3-r0	2.8.1-r0
Low	GHSA-r6ph-v2qm-q3c2	cryptography@43.0.1	46.0.5
Low	GHSA-mvfq-ggxm-9mc5	django@4.2.17	4.2.30
Low	GHSA-j5g9-f88f-gfj3	httplib2@0.22.0	0.32.0
Low	GHSA-f2ff-p2ww-7p4p	sqlparse@0.5.0	0.6.0
Low	GHSA-pwgv-4x5q-6m9f	sqlparse@0.5.0	0.6.0
Low	GHSA-jwv3-5hgf-82ww	cryptography@43.0.1	49.0.0
Low	GHSA-wf93-45jw-7689	pip@24.2	26.1.2
Low	GHSA-xgmm-8j9v-c9wx	pyjwt@2.8.0	2.13.0
Low	ALPINE-CVE-2025-15468	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-r6h4-mm7h-8pmq	pymdown-extensions@10.0	10.16.1
Low	GHSA-qjxf-f2mg-c6mc	tornado@6.4.2	6.5.5
Low	ALPINE-CVE-2026-6478	postgresql16@16.3-r0	16.14-r0
Low	ALPINE-CVE-2025-4207	postgresql16@16.3-r0	16.9-r0
Low	GHSA-mpf4-983q-p7j4	tornado@6.4.2	6.5.8
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.5.1	0.6.4

Used by

1 chart

Chart	Version	Tag	Containers
oncall-hobbylovemew67Verified publisher	0.0.5	v1.13.11	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.