hkotel/mealie:frontend-v1.0.0beta-2 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of hkotel/mealie

hkotel/mealie:frontend-v1.0.0beta-2 resolved to 3c04c0e85039, scanned 14 Sept 2026: 383 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them mealie.

Radar Score

4,84201272299

383 findings on digest 3c04c0e85039 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
frontend-v1.0.0beta-2resolves to	3c04c0e85039	1 chart	8 days ago	01272299	4,842

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

299 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 3c04c0e85039 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-6vfc-qv3f-vr6c	markdown-it@12.2.0	12.3.2
Low	GHSA-v62p-rq8g-8h59	pbkdf2@3.1.2	3.1.3
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.52.0
Low	GHSA-62hf-57xw-28j9	axios@0.21.3	0.31.1
Low	GHSA-h7cp-r72f-jxh6	pbkdf2@3.1.2	3.1.3
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.52.0
Low	GHSA-mmhx-hmjr-r674	dompurify@2.3.8	2.5.4
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.11	7.5.7
Low	GHSA-q4r8-xm5f-56gw	github.com/smallstep/certificates@v0.17.5-0.20211008195551-04fe3126bebf	0.30.0
Low	GO-2023-1571	stdlib@go1.17.10	1.19.6
Low	GHSA-3g43-6gmg-66jw	axios@0.21.3	0.31.1
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.14.3	1.15.6
Low	GHSA-ph9p-34f9-6g65	tmp@0.0.33	0.2.6
Low	GHSA-hfxv-24rg-xrqf	axios@0.21.3	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.21.3	0.32.0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.39.0	1.83.1
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-pw2r-vq6v-hr8c	follow-redirects@1.14.3	1.14.8
Low	GHSA-f5x3-32g6-xq36	tar@6.1.11	6.2.1
Low	GHSA-j8xg-fqg3-53r7	word-wrap@1.2.3	1.2.4
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.0.0-20211209124913-491a49abca63
Low	GHSA-6g55-p6wh-862q	postcss@7.0.39	8.5.12
Low	GHSA-pmwg-cvhr-8vh7	axios@0.21.3	0.31.1
Low	GO-2023-2102	stdlib@go1.17.10	1.20.10
Low	GHSA-qffp-2rhf-9h96	tar@6.1.11	7.5.10
Low	GHSA-22p9-wv53-3rq4	linkify-it@3.0.2	5.0.1
Low	ALPINE-CVE-2023-0465	openssl@1.1.1n-r0	1.1.1t-r2
Low	GHSA-23hp-3jrh-7fpw	tar@6.1.11	7.5.19
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.1	3.15.0
Low	GHSA-q6wq-5p59-983w	parse-url@6.0.0	6.0.1
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	GHSA-7r86-cg39-jmmj	minimatch@5.0.1	5.1.8
Low	GHSA-c27g-q93r-2cwf	launch-editor@2.3.0	2.9.0
Low	GHSA-3jp5-5f8r-q2wg	vuetify@2.6.6	3.0.0-alpha.10
Low	GHSA-x9w5-v3q2-3rhw	browserify-sign@4.2.1	4.2.2
Low	GHSA-952p-6rrq-rcjv	micromatch@4.0.4	4.0.8
Low	GHSA-8qq5-rm4j-mr97	tar@6.1.11	7.5.3
Low	GO-2022-0969	stdlib@go1.17.10	1.18.6
Low	GHSA-fvcv-3m26-pcqx	axios@0.21.3	0.31.0
Low	GHSA-jpp7-7chh-cf67	parse-url@6.0.0	6.0.1
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.52.0
Low	GHSA-23c5-xmqv-rm74	minimatch@5.0.1	5.1.8
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	GHSA-8g77-54rh-46hx	parse-git-config@3.0.0	no fix listed
Low	GHSA-73rr-hh4g-fpgx	diff@5.0.0	5.2.2
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.13.0
Low	GHSA-w27v-7q3p-w38r	svgo@1.3.2	2.8.4
Low	GHSA-73wf-gq98-2v4g	browserslist@4.19.1	4.28.7

Used by

1 chart

Chart	Version	Tag	Containers
mealiegeek-cookbookVerified publisher	5.1.2	frontend-v1.0.0beta-2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.