StackRadar

louislam/uptime-kuma:2.0.2-slim-rootless container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of louislam/uptime-kuma

louislam/uptime-kuma:2.0.2-slim-rootless resolved to 9865163f92c1, scanned 14 Sept 2026: 647 findings, 0 critical; deployed by 1 chart, among them uptime-kuma.

Radar Score

6,8830399544

647 findings on digest 9865163f92c1 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.0.2-slim-rootlessresolves to9865163f92c11 chart8 days ago03995446,883

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

647 distinct on this digest

Findings for digest 9865163f92c1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-8gc5-j5rx-235rfast-xml-parser@5.2.55.5.6
LowGO-2023-2102stdlib@go1.20.51.20.10
LowGHSA-qffp-2rhf-9h96tar@6.2.17.5.10
LowGHSA-37qj-frw5-hhjhfast-xml-parser@5.2.55.3.4
LowGHSA-xqr8-7jwr-rhp7certifi@2022.9.242023.7.22
LowDEBIAN-CVE-2025-69534python3.11@3.11.2-6+deb12u6no fix listed
LowDEBIAN-CVE-2026-80230curl@7.88.1-10+deb12u14no fix listed
LowGHSA-5wmx-573v-2qwqmarkdown@3.4.13.8.1
LowGHSA-23hp-3jrh-7fpwtar@6.2.17.5.19
LowDEBIAN-CVE-2026-42013gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
LowDEBIAN-CVE-2026-0861glibc@2.36-9+deb12u132.36-9+deb12u14
LowDEBIAN-CVE-2026-3833gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
LowDEBIAN-CVE-2024-2236libgcrypt20@1.10.1-3no fix listed
LowDEBIAN-CVE-2026-31789openssl@3.0.17-1~deb12u33.0.19-1~deb12u2
LowDEBIAN-CVE-2025-69419openssl@3.0.17-1~deb12u33.0.18-1~deb12u2
LowDEBIAN-CVE-2022-23491python-certifi@2022.9.24-1no fix listed
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.44.0.6
LowDEBIAN-CVE-2026-54874openssl@3.0.17-1~deb12u3no fix listed
LowGHSA-7r86-cg39-jmmjminimatch@9.0.59.0.7
LowDEBIAN-CVE-2026-42766openssl@3.0.17-1~deb12u33.0.20-1~deb12u2
LowGHSA-vp29-5652-4fw9github.com/coredns/coredns@v1.12.21.14.3
LowGHSA-2m8v-j782-fhvrsocket.io-parser@4.2.44.2.7
LowDEBIAN-CVE-2025-69720ncurses@6.4-4no fix listed
LowGHSA-8qq5-rm4j-mr97tar@6.2.17.5.3
LowDEBIAN-CVE-2025-6020pam@1.5.2-6+deb12u11.5.2-6+deb12u2
LowGHSA-fvcv-3m26-pcqxaxios@0.30.20.31.0
LowGHSA-f269-vfmq-vjvjundici@6.22.06.24.0
LowDEBIAN-CVE-2026-86145pcre2@10.42-110.42-1+deb12u1
LowGHSA-rcmh-qjqh-p98vnodemailer@6.9.167.0.11
LowDEBIAN-CVE-2026-3644python3.11@3.11.2-6+deb12u6no fix listed
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.38.00.52.0
LowGHSA-23c5-xmqv-rm74minimatch@9.0.59.0.7
LowGHSA-6q5m-63h6-5x4vliquidjs@10.22.0no fix listed
LowGHSA-2wpx-qpw2-g5h5github.com/coredns/coredns@v1.12.21.14.3
LowGHSA-qpx9-hpmf-5gmwunderscore@1.13.71.13.8
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.38.00.52.0
LowDEBIAN-CVE-2025-15281glibc@2.36-9+deb12u132.36-9+deb12u14
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.22.1.3
LowDEBIAN-CVE-2025-6297dpkg@1.21.221.21.23
LowDEBIAN-CVE-2026-45186expat@2.5.0-1+deb12u2no fix listed
LowGHSA-wcpc-wj8m-hjx6protobufjs@7.2.67.6.1
LowDEBIAN-CVE-2026-42011gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
LowGHSA-73rr-hh4g-fpgxdiff@4.0.24.0.4
LowGHSA-r6ph-v2qm-q3c2cryptography@38.0.446.0.5
LowDSA-6102-1python-urllib3@1.26.12-1+deb12u11.26.12-1+deb12u2
LowDEBIAN-CVE-2026-9538perl@5.36.0-7+deb12u3no fix listed
LowDEBIAN-CVE-2026-58050libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowDEBIAN-CVE-2020-15719openldap@2.5.13+dfsg-5no fix listed
LowGHSA-66ff-xgx4-vchmprotobufjs@7.2.67.5.6
LowDEBIAN-CVE-2023-42465sudo@1.9.13p3-1+deb12u2no fix listed

Used by

1 chart
ChartVersionTagContainers
uptime-kumapascaliskeVerified publisher3.0.02.0.2-slim-rootless1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.