louislam/uptime-kuma:2.0.2-slim-rootless container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of louislam/uptime-kuma

louislam/uptime-kuma:2.0.2-slim-rootless resolved to 9865163f92c1, scanned 14 Sept 2026: 647 findings, 0 critical; deployed by 1 chart, among them uptime-kuma.

Radar Score

6,8830399544

647 findings on digest 9865163f92c1 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.0.2-slim-rootlessresolves to	9865163f92c1	1 chart	9 days ago	0399544	6,883

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

544 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 9865163f92c1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.12	1.26.19
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	DEBIAN-CVE-2026-26007	python-cryptography@38.0.4-3+deb12u1	no fix listed
Low	GHSA-m7pr-hjqh-92cm	axios@0.30.2	0.31.1
Low	DEBIAN-CVE-2026-8328	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u2	no fix listed
Low	GO-2023-1878	stdlib@go1.20.5	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.38.0	0.52.0
Low	GHSA-jp2q-39xq-3w4g	fast-xml-parser@5.2.5	5.5.7
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-0672	python3.11@3.11.2-6+deb12u6	3.11.2-6+deb12u7
Low	GHSA-p6gq-j5cr-w38f	nodemailer@6.9.16	9.0.1
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GO-2024-2963	stdlib@go1.20.5	1.21.12
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.40.0	0.55.0
Low	GHSA-mmx7-hfxf-jppx	axios@0.30.2	0.33.0
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u6	no fix listed
Low	GHSA-8xx9-69p8-7jp3	liquidjs@10.22.0	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@6.9.16	8.0.5
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.38.0	0.45.0
Low	DEBIAN-CVE-2026-35535	sudo@1.9.13p3-1+deb12u2	1.9.13p3-1+deb12u4
Low	DEBIAN-CVE-2026-82474	sudo@1.9.13p3-1+deb12u2	no fix listed
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2025-15366	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-87910	python3.11@3.11.2-6+deb12u6	no fix listed
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.72.2	1.83.1
Low	GO-2023-2382	stdlib@go1.20.5	1.20.12
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u14	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.38.0	0.52.0
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	DEBIAN-CVE-2026-22796	openssl@3.0.17-1~deb12u3	3.0.18-1~deb12u2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.38.0	0.45.0
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.38.0	0.52.0
Low	GO-2024-2599	stdlib@go1.20.5	1.21.8
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	GO-2024-3106	stdlib@go1.20.5	1.22.7
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4+deb12u2	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.0.1	10.1.1
Low	GO-2024-2600	stdlib@go1.20.5	1.21.8
Low	DEBIAN-CVE-2025-15367	python3.11@3.11.2-6+deb12u6	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
uptime-kumapascaliskeVerified publisher	3.0.0	2.0.2-slim-rootless	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.