library/ghost:6.39.0-alpine container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/ghost
library/ghost:6.39.0-alpine resolved to 77196da4b0df, scanned 14 Sept 2026: 225 findings, 0 critical; deployed by 1 chart, among them ghost.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
225 distinct on this digest
Findings for digest 77196da4b0df as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-vmh5-mc38-953g | undici | 7.28.0 |
| Low | GHSA-v2hh-gcrm-f6hx | fast-uri | 3.1.4 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-v245-v573-v5vm | linkify-it | 5.0.2 |
| Low | GHSA-5p2g-fcmc-qvqq | image-size | no fix listed |
| Low | GHSA-w3rx-r6r6-pgpr | image-size | no fix listed |
| Low | GHSA-vq4v-j7r6-jq4m | pnpm | 11.11.0 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 4.0.4 |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | GHSA-rxhj-4m44-96r4 | pnpm | 11.4.0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 4.3.2 |
| Low | GHSA-4c8g-83qw-93j6 | fast-uri | 3.1.3 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | GHSA-7pqw-9j4j-h8q3 | extract-zip | no fix listed |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-hm92-r4w5-c3mj | undici | 7.28.0 |
| Low | GHSA-cjhr-43r9-cfmw | pnpm | 11.4.0 |
| Low | GHSA-72r4-9c5j-mj57 | pnpm | 11.7.0 |
| Low | GHSA-fr4h-3cph-29xv | pnpm | 11.7.0 |
| Low | GHSA-c59q-g84q-2gj5 | pnpm | 11.11.0 |
| Low | GHSA-qwph-4952-7xr6 | jsonwebtoken | 9.0.0 |
| Low | GHSA-h39j-r5qq-r9mm | decompress | no fix listed |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-4xrf-jv44-h6hh | ip-address | 10.2.2 |
| Low | GHSA-jqh4-m9w3-8hp9 | axios | 1.18.0 |
| Low | GHSA-4gxm-v5v7-fqc4 | pnpm | 11.5.3 |
| Low | GHSA-wc9g-mqfw-jrwm | multer | 2.3.0 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | GHSA-hcpx-6fm6-wx23 | axios | 1.18.0 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 2.0.3 |
| Low | GHSA-535w-7cp7-47q4 | multer | 2.3.0 |
| Low | GHSA-72gw-mp4g-v24j | multer | 2.2.0 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | GHSA-f4gw-2p7v-4548 | axios | 1.18.0 |
| Low | GHSA-42h9-826w-cgv3 | axios | 1.18.0 |
| Low | GHSA-pmv8-rq9r-6j72 | axios | 1.18.0 |
| Low | GHSA-mwf2-3pr3-8698 | axios | 1.18.0 |
| Low | GHSA-qxc2-j82w-r537 | @faker-js/ | 10.5.0 |
| Low | GHSA-3qhv-2rgh-x77r | pnpm | 11.5.3 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | GHSA-hjrf-2m68-5959 | jsonwebtoken | 9.0.0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| ghostkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 6.39.0-alpine | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.