library/ghost:6.37.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/ghost
library/ghost:6.37.0 resolved to 1ef2e532ca4d, scanned 14 Sept 2026: 351 findings, 0 critical; deployed by 1 chart, among them ghost.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
351 distinct on this digest
Findings for digest 1ef2e532ca4d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-fr4h-3cph-29xv | pnpm | 10.34.4 |
| Low | GHSA-c59q-g84q-2gj5 | pnpm | 10.34.5 |
| Low | GHSA-qwph-4952-7xr6 | jsonwebtoken | 9.0.0 |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-h39j-r5qq-r9mm | decompress | no fix listed |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-4xrf-jv44-h6hh | ip-address | 10.2.2 |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-42012 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-57432 | perl | no fix listed |
| Low | GHSA-jqh4-m9w3-8hp9 | axios | 1.18.0 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | GHSA-4gxm-v5v7-fqc4 | pnpm | 10.34.2 |
| Low | GHSA-wc9g-mqfw-jrwm | multer | 2.3.0 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | GHSA-hcpx-6fm6-wx23 | axios | 1.18.0 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 2.0.3 |
| Low | DEBIAN-CVE-2016-2781 | coreutils | no fix listed |
| Low | GHSA-535w-7cp7-47q4 | multer | 2.3.0 |
| Low | GHSA-72gw-mp4g-v24j | multer | 2.2.0 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | DEBIAN-CVE-2026-48962 | perl | no fix listed |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | GHSA-f4gw-2p7v-4548 | axios | 1.18.0 |
| Low | GHSA-42h9-826w-cgv3 | axios | 1.18.0 |
| Low | GHSA-pmv8-rq9r-6j72 | axios | 1.18.0 |
| Low | DEBIAN-CVE-2026-42015 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | GHSA-mwf2-3pr3-8698 | axios | 1.18.0 |
| Low | GHSA-qxc2-j82w-r537 | @faker-js/ | 10.5.0 |
| Low | DEBIAN-CVE-2026-48961 | perl | no fix listed |
| Low | GHSA-3qhv-2rgh-x77r | pnpm | 10.34.2 |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-hjrf-2m68-5959 | jsonwebtoken | 9.0.0 |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
| Low | GHSA-hpcv-96wg-7vj8 | dompurify | 3.4.6 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | GHSA-mmx7-hfxf-jppx | axios | 1.18.0 |
| Low | DEBIAN-CVE-2026-7017 | perl | no fix listed |
| Low | GHSA-xj6q-8x83-jv6g | axios | 1.18.0 |
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | GHSA-p4xf-rf54-rj3x | pnpm | 10.34.0 |
| Low | GHSA-r47g-fvhr-h676 | dompurify | 3.4.6 |
| Low | GHSA-jxxr-4gwj-5jf2 | brace-expansion | 5.0.6 |