koenkk/zigbee2mqtt:1.19.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of koenkk/zigbee2mqtt

koenkk/zigbee2mqtt:1.19.1 resolved to 5f9129b1ffbc, scanned 14 Sept 2026: 118 findings, 1 critical; deployed by 2 charts, among them zigbee2mqtt and zigbee2mqtt.

Radar Score

2,173164665

118 findings on digest 5f9129b1ffbc · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.19.1resolves to	5f9129b1ffbc	2 charts	7 days ago	164665	2,173

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

118 distinct on this digest

Findings for digest 5f9129b1ffbc as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-96hv-2xvq-fx4p	ws@7.4.5	7.5.11
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.0.4	3.1.3
Medium	GHSA-pf86-5x62-jrwf	axios@0.21.1	0.31.1
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	GHSA-62hf-57xw-28j9	axios@0.21.1	0.31.1
Low	GHSA-34x7-hfp2-rc4v	tar@4.4.13	7.5.7
Low	GHSA-3g43-6gmg-66jw	axios@0.21.1	0.31.1
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.14.1	1.15.6
Low	GHSA-hfxv-24rg-xrqf	axios@0.21.1	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.21.1	0.32.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-pw2r-vq6v-hr8c	follow-redirects@1.14.1	1.14.8
Low	GHSA-f5x3-32g6-xq36	tar@4.4.13	6.2.1
Low	GHSA-pmwg-cvhr-8vh7	axios@0.21.1	0.31.1
Low	GHSA-qffp-2rhf-9h96	tar@4.4.13	7.5.10
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.13	7.5.19
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.1	3.15.0
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.2	2.5.6
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.13	7.5.3
Low	GHSA-fvcv-3m26-pcqx	axios@0.21.1	0.31.0
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.13	7.5.18
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.14.1	1.15.4
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	GHSA-6chq-wfr3-2hj9	axios@0.21.1	0.31.1
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@4.4.13	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.1	3.15.2
Low	GHSA-r292-9mhp-454m	tar@4.4.13	7.5.21
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.14.1	1.16.0
Low	GHSA-wf5p-g6vw-rhxx	axios@0.21.1	0.28.0
Low	GHSA-w5hq-g745-h8pq	uuid@3.3.3	11.1.1
Low	GHSA-9ppj-qmqm-q256	tar@4.4.13	7.5.11
Low	GHSA-mpwj-fcr6-x34c	yarn@1.22.5	1.22.13
Low	GHSA-3p68-rc4w-qgx5	axios@0.21.1	0.31.0
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	ALPINE-CVE-2021-3996	util-linux@2.35.2-r0	2.37.3-r0
Low	ALPINE-CVE-2021-3995	util-linux@2.35.2-r0	2.37.3-r0
Low	GHSA-83g3-92jg-28cx	tar@4.4.13	7.5.8
Low	GHSA-w8wr-v893-vjvp	tar@4.4.13	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@0.21.1	0.31.1
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r20	1.31.1-r21
Low	GHSA-mmx7-hfxf-jppx	axios@0.21.1	0.33.0
Low	MAL-2022-4933	npm-cli-docs@0.1.0	no fix listed
Low	GHSA-cm22-4g7w-348p	serve-static@1.14.1	1.16.0
Low	GHSA-gvwx-54wh-qm9j	tar@4.4.13	7.5.17
Low	ALPINE-CVE-2022-0563	util-linux@2.35.2-r0	2.37.4-r0

Used by

2 charts

Chart	Version	Tag	Containers
zigbee2mqttgeek-cookbookVerified publisher	9.4.2	1.19.1	1
zigbee2mqtthelm-chart-roeiVerified publisher	1.19.0	1.19.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.