ianw/quickchart:v1.7.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of ianw/quickchart
ianw/quickchart:v1.7.1 resolved to dc49dd460c37, scanned 14 Sept 2026: 377 findings, 5 critical, 3 on KEV; deployed by 1 chart, among them quickchart.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
106 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest dc49dd460c37 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-6q6q-88xp-6f2r | gopkg.in/ | 2.2.4 |
| Medium | ALPINE-CVE-2023-3138 | libx11 | 1.7.3.1-r1 |
| Medium | GHSA-72xf-g2v4-qvf3 | tough-cookie | 4.1.3 |
| Medium | GHSA-rc47-6667-2j5j | http-cache-semantics | 4.1.1 |
| Medium | GHSA-55hx-c926-fr95 | vm2 | 3.11.0 |
| Medium | ALPINE-CVE-2023-5678 | openssl | 1.1.1w-r1 |
| Medium | GHSA-cfcw-xp6x-25gj | vm2 | 3.11.6 |
| Medium | GHSA-69ch-w2m2-3vjp | golang.org/ | 0.3.8 |
| Medium | GHSA-rf6f-7fwh-wjgh | flatted | 3.4.2 |
| Medium | ALPINE-CVE-2023-23914 | curl | 7.80.0-r6 |
| Medium | GO-2022-0433 | stdlib | 1.17.9 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-v6mx-mf47-r5wg | vm2 | 3.11.4 |
| Medium | GHSA-3h5v-q93c-6h6q | ws | 7.5.10 |
| Medium | GHSA-ppp9-7jff-5vj2 | golang.org/ | 0.3.7 |
| Medium | GHSA-pjwm-pj3p-43mv | axios | 0.32.0 |
| Medium | ALPINE-CVE-2023-28320 | curl | 8.1.0-r0 |
| Medium | ALPINE-CVE-2023-35945 | nghttp2 | 1.46.0-r1 |
| Medium | GHSA-248r-7h7q-cr24 | vm2 | 3.11.3 |
| Medium | ALPINE-CVE-2022-43552 | curl | 7.80.0-r5 |
| Medium | GHSA-jr5f-v2jv-69x6 | axios | 0.30.0 |
| Medium | GHSA-xwcq-pm8m-c4vf | crypto-js | 4.2.0 |
| Medium | ALPINE-CVE-2022-34526 | tiff | 4.4.0-r3 |
| Medium | ALPINE-CVE-2023-23916 | curl | 7.80.0-r6 |
| Medium | ALPINE-CVE-2023-46218 | curl | 8.5.0-r0 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GO-2021-0243 | stdlib | 1.15.14 |
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | GHSA-p782-xgp4-8hr8 | golang.org/ | 0.0.0-20220412211240-33da011f77ad |
| Medium | ALPINE-CVE-2023-29491 | ncurses | 6.3_p20211120-r2 |
| Medium | GHSA-cqmj-92xf-r6r9 | socket.io-parser | 3.3.4 |
| Medium | ALPINE-CVE-2023-1999 | libwebp | 1.2.2-r1 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | GHSA-m4wx-m65x-ghrr | vm2 | 3.11.4 |
| Medium | ALPINE-CVE-2023-27537 | curl | 8.0.1-r0 |
| Medium | GHSA-8cj5-5rvv-wf4v | tar-fs | 2.1.3 |
| Medium | ALPINE-CVE-2023-28321 | curl | 8.1.0-r0 |
| Medium | GHSA-m283-3h24-438v | vm2 | 3.11.6 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 0.32.0 |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | ALPINE-CVE-2022-2058 | tiff | 4.4.0-r3 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 7.5.11 |
| Medium | ALPINE-CVE-2022-2521 | tiff | 4.4.0-r3 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| quickchartcowboysysopVerified publisher | 5.0.0 | v1.7.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.