heartexlabs/label-studio:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of heartexlabs/label-studio
heartexlabs/label-studio:latest resolved to aa461572e8f9, scanned 14 Sept 2026: 248 findings, 1 critical; deployed by 1 chart, among them label-studio.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
248 distinct on this digest
Findings for digest aa461572e8f9 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2026-42945 | nginx | 1.28.3-r1 |
| High | ALPINE-CVE-2026-27654 | nginx | 1.28.3-r0 |
| High | ALPINE-CVE-2026-49975 | nginx | 1.28.3-r3 |
| High | ALPINE-CVE-2026-9256 | nginx | 1.28.3-r2 |
| Medium | ALPINE-CVE-2026-42055 | nginx | 1.28.3-r4 |
| Medium | ALPINE-CVE-2026-42533 | nginx | 1.28.3-r6 |
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2021-27219 | glib | 2.66.6-r0 |
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-9079 | curl | 8.22.0-r0 |
| Medium | GHSA-x99w-6fgc-pmfw | nltk | 3.10.3 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-10536 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-11856 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-8925 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-27784 | nginx | 1.28.3-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-27651 | nginx | 1.28.3-r0 |
| Medium | PYSEC-2026-36 | cryptography | 46.0.7 |
| Medium | ALPINE-CVE-2026-32647 | nginx | 1.28.3-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | GHSA-jm6w-m3j8-898g | nltk | 3.9.4 |
| Medium | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.5.6-r0 |
| Medium | PYSEC-2026-2120 | black | 26.3.0 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-8924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | PYSEC-2026-3717 | django | 5.2.17 |
| Medium | GHSA-m4rf-3fr8-xwx3 | nltk | 3.10.3 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-60005 | nginx | 1.28.3-r6 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-42946 | nginx | 1.28.3-r1 |
| Medium | ALPINE-CVE-2026-8927 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.5.6-r0 |
| Medium | GHSA-x5ph-mj9p-rfr8 | nltk | 3.10.0 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.5.6-r0 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | ALPINE-CVE-2026-8926 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-27135 | nghttp2 | 1.68.1 |
| Low | PYSEC-2026-3750 | nltk | 3.10.0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| label-studioinseefrlab | 2.3.1 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.