koenkk/zigbee2mqtt:1.19.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of koenkk/zigbee2mqtt

koenkk/zigbee2mqtt:1.19.1 resolved to 5f9129b1ffbc, scanned 14 Sept 2026: 118 findings, 1 critical; deployed by 2 charts, among them zigbee2mqtt and zigbee2mqtt.

Radar Score

2,173164665

118 findings on digest 5f9129b1ffbc · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.19.1resolves to	5f9129b1ffbc	2 charts	7 days ago	164665	2,173

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

118 distinct on this digest

Findings for digest 5f9129b1ffbc as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2021-3711	openssl@1.1.1k-r0	1.1.1l-r0
High	ALPINE-CVE-2022-0778	openssl@1.1.1k-r0	1.1.1n-r0
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	ALPINE-CVE-2021-3712	openssl@1.1.1k-r0	1.1.1l-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-3jfq-g458-7qm9	tar@4.4.13	4.4.14
Medium	GHSA-hrpp-h998-j3pp	qs@6.5.2	6.5.3
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.5	no fix listed
Medium	GHSA-xvch-5gv4-984h	minimist@1.2.5	1.2.6
Medium	GHSA-r628-mhmh-qjhw	tar@4.4.13	4.4.15
Medium	GHSA-896r-f27r-55mw	json-schema@0.2.3	0.4.0
Medium	GHSA-cph5-m8f7-6c5x	axios@0.21.1	0.21.2
Medium	ALPINE-CVE-2022-1271	xz@5.2.5-r0	5.2.5-r1
Medium	ALPINE-CVE-2022-28391	busybox@1.31.1-r20	1.31.1-r22
Medium	GHSA-8hfj-j24r-96c4	moment@2.29.1	2.29.2
Medium	GHSA-wc69-rhjr-hc9g	moment@2.29.1	2.29.4
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.6-r0	2.10.7-r0
Medium	GHSA-9r2w-394v-53qc	tar@4.4.13	4.4.16
Medium	GHSA-fwr7-v2mv-hh25	async@3.2.0	3.2.2
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@4.1.0	4.1.1
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.3.2	2.5.4
Medium	GHSA-74fj-2j2h-c42q	follow-redirects@1.14.1	1.14.7
Medium	GHSA-c2qf-rxjj-qqgw	semver@5.7.1	5.7.2
Medium	GHSA-43fc-jf86-j433	axios@0.21.1	0.30.3
Medium	ALPINE-CVE-2021-42380	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42379	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42381	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42385	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42378	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42382	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42384	busybox@1.31.1-r20	1.31.1-r21
Medium	ALPINE-CVE-2021-42386	busybox@1.31.1-r20	1.31.1-r21
Medium	GHSA-qq89-hq3f-393p	tar@4.4.13	4.4.18
Medium	GHSA-pq67-2wwv-3xjx	tar-fs@2.1.1	2.1.2
Medium	GHSA-wpg7-2c88-r8xv	simple-get@3.1.0	3.1.1
Medium	ALPINE-CVE-2021-42383	busybox@1.31.1-r20	1.31.1-r21
Medium	GHSA-f8q6-p94x-37v3	minimatch@3.0.4	3.0.5
Medium	GHSA-72xf-g2v4-qvf3	tough-cookie@2.4.3	4.1.3
Medium	GHSA-5955-9wpr-37jh	tar@4.4.13	4.4.18
Medium	GHSA-rc47-6667-2j5j	http-cache-semantics@3.8.1	4.1.1
Medium	GHSA-3h5v-q93c-6h6q	ws@7.4.5	7.5.10
Medium	GHSA-pjwm-pj3p-43mv	axios@0.21.1	0.32.0
Medium	GHSA-jr5f-v2jv-69x6	axios@0.21.1	0.30.0
Medium	GHSA-6fc8-4gx4-v693	ws@7.4.5	7.4.6
Medium	GHSA-8cj5-5rvv-wf4v	tar-fs@2.1.1	2.1.3
Medium	GHSA-3xgq-45jj-v275	cross-spawn@5.1.0	6.0.6
Medium	GHSA-p92q-9vqr-4j8v	axios@0.21.1	0.32.0
Medium	GHSA-vj76-c3g6-qr5v	tar-fs@2.1.1	2.1.4
Medium	GHSA-pfrx-2q88-qq97	got@6.7.1	11.8.5

Used by

2 charts

Chart	Version	Tag	Containers
zigbee2mqttgeek-cookbookVerified publisher	9.4.2	1.19.1	1
zigbee2mqtthelm-chart-roeiVerified publisher	1.19.0	1.19.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.