linuxserver/jellyfin:10.7.7 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of linuxserver/jellyfin
linuxserver/jellyfin:10.7.7 resolved to 2427dde159a2, scanned 14 Sept 2026: 494 findings, 12 critical, 5 on KEV; deployed by 1 chart, among them jellyfin.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
494 distinct on this digest
Findings for digest 2427dde159a2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | UBUNTU-CVE-2022-2068 | openssl | 1.1.1f-1ubuntu2.15 |
| Critical | UBUNTU-CVE-2021-3711 | openssl | 1.1.1f-1ubuntu2.fips.7.2 |
| Critical | UBUNTU-CVE-2022-1292 | openssl | 1.1.1f-1ubuntu2.fips.13.1 |
| Critical | GHSA-2m69-gcr7-jv3q | SQLitePCLRaw.lib.e_sqlite3 | no fix listed |
| Critical | GHSA-j7hp-h8jx-5pprKEV | SkiaSharp | 2.88.6 |
| Critical | UBUNTU-CVE-2023-4863KEV | libwebp | 0.6.1-2ubuntu0.20.04.3 |
| Critical | UBUNTU-CVE-2023-5217KEV | libvpx | 1.8.2-1ubuntu0.2 |
| Critical | GHSA-5rrx-jjjq-q2r5 | Microsoft.AspNetCore.Server.Kestrel.Core | 2.3.6 |
| Critical | UBUNTU-CVE-2025-27363KEV | freetype | 2.10.1-2ubuntu0.4 |
| Critical | UBUNTU-CVE-2023-44487KEV | nghttp2 | 1.40.0-1ubuntu0.2 |
| Critical | UBUNTU-CVE-2025-6965 | sqlite3 | 3.31.1-4ubuntu0.7+esm1 |
| Critical | UBUNTU-CVE-2024-2961 | glibc | 2.31-0ubuntu9.15 |
| High | UBUNTU-CVE-2022-0778 | openssl | 1.1.1f-1ubuntu2.fips.12 |
| High | UBUNTU-CVE-2023-0286 | openssl | 1.1.1f-1ubuntu2.17 |
| High | UBUNTU-CVE-2024-2398 | curl | 7.68.0-1ubuntu2.22 |
| High | UBUNTU-CVE-2018-25032 | zlib | 1:1.2.11.dfsg-2ubuntu1.3 |
| High | UBUNTU-CVE-2021-23840 | openssl | 1.1.1f-1ubuntu2.fips.7.2 |
| High | UBUNTU-CVE-2023-2650 | openssl | 1.1.1f-1ubuntu2.19 |
| High | UBUNTU-CVE-2021-3712 | openssl | no fix listed |
| High | UBUNTU-CVE-2023-48795 | libssh | 0.9.3-2ubuntu2.4 |
| High | UBUNTU-CVE-2022-37434 | zlib | 1:1.2.11.dfsg-2ubuntu1.5 |
| High | GHSA-5crp-9r3c-p9vr | Newtonsoft.Json | 13.0.1 |
| High | UBUNTU-CVE-2021-3449 | openssl | 1.1.1f-1ubuntu2.fips.7 |
| High | UBUNTU-CVE-2024-28182 | nghttp2 | 1.40.0-1ubuntu0.3 |
| High | UBUNTU-CVE-2024-2511 | openssl | 1.1.1f-1ubuntu2.23 |
| High | UBUNTU-CVE-2024-3596 | krb5 | 1.17-6ubuntu4.8 |
| High | UBUNTU-CVE-2022-40303 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| High | UBUNTU-CVE-2022-35737 | sqlite3 | 3.31.1-4ubuntu0.5 |
| High | UBUNTU-CVE-2022-32206 | curl | 7.68.0-1ubuntu2.12 |
| High | UBUNTU-CVE-2022-4450 | openssl | 1.1.1f-1ubuntu2.17 |
| Medium | GHSA-7jgj-8wvc-jh57 | System.Net.Http | 4.3.4 |
| Medium | UBUNTU-CVE-2022-42898 | heimdal | 7.7.0+dfsg-1ubuntu1.3 |
| Medium | UBUNTU-CVE-2022-42898 | krb5 | 1.17-6ubuntu4.2 |
| Medium | UBUNTU-CVE-2021-36222 | krb5 | 1.17-6ubuntu4.3 |
| Medium | UBUNTU-CVE-2024-7264 | curl | 7.68.0-1ubuntu2.23 |
| Medium | UBUNTU-CVE-2024-5535 | openssl | 1.1.1f-1ubuntu2.23 |
| Medium | UBUNTU-CVE-2022-32221 | curl | 7.68.0-1ubuntu2.14 |
| Medium | UBUNTU-CVE-2022-1271 | gzip | 1.10-0ubuntu4.1 |
| Medium | UBUNTU-CVE-2022-1271 | xz-utils | 5.2.4-1ubuntu1.1 |
| Medium | UBUNTU-CVE-2022-4304 | openssl | 1.1.1f-1ubuntu2.17 |
| Medium | UBUNTU-CVE-2022-40304 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| Medium | UBUNTU-CVE-2022-1664 | dpkg | 1.19.7ubuntu3.2 |
| Medium | UBUNTU-CVE-2019-1010022 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2021-33574 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2022-27404 | freetype | 2.10.1-2ubuntu0.2 |
| Medium | UBUNTU-CVE-2022-1586 | pcre2 | 10.34-7ubuntu0.1 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 1.1.1f-1ubuntu2.24+esm4 |
| Medium | UBUNTU-CVE-2018-20796 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2021-39537 | ncurses | 6.2-0ubuntu2.1 |
| Medium | UBUNTU-CVE-2019-1010023 | glibc | no fix listed |