louislam/uptime-kuma:2.0.2-slim-rootless container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of louislam/uptime-kuma
louislam/uptime-kuma:2.0.2-slim-rootless resolved to 9865163f92c1, scanned 14 Sept 2026: 647 findings, 0 critical; deployed by 1 chart, among them uptime-kuma.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
647 distinct on this digest
Findings for digest 9865163f92c1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | DEBIAN-CVE-2025-7458 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-15661 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-2219 | dpkg | 1.21.23 |
| Low | GHSA-mm7p-fcc7-pg87 | nodemailer | 7.0.7 |
| Low | DEBIAN-CVE-2026-42497 | perl | no fix listed |
| Low | GHSA-c9v3-4pv7-87pr | github.com/ | 1.14.2 |
| Low | DEBIAN-CVE-2026-41992 | gzip | no fix listed |
| Low | DEBIAN-CVE-2026-12064 | curl | no fix listed |
| Low | GHSA-43fp-rhv2-5gv8 | certifi | 2022.12.07 |
| Low | GHSA-9r5m-9576-7f6x | liquidjs | no fix listed |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | DEBIAN-CVE-2026-8932 | curl | no fix listed |
| Low | GHSA-56p5-8mhr-2fph | liquidjs | 10.25.3 |
| Low | DEBIAN-CVE-2026-69249 | python-cryptography | no fix listed |
| Low | PYSEC-2026-3553 | cryptography | 49.0.0 |
| Low | DEBIAN-CVE-2026-8286 | curl | no fix listed |
| Low | GHSA-h8mm-c463-wjq3 | github.com/ | 1.14.3 |
| Low | DEBIAN-CVE-2026-75803 | openssl | no fix listed |
| Low | GHSA-6chq-wfr3-2hj9 | axios | 0.31.1 |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-hh27-hf48-9f5q | liquidjs | no fix listed |
| Low | GHSA-r7g9-xpmj-5fcq | liquidjs | 10.26.0 |
| Low | DEBIAN-CVE-2026-4046 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-4rc3-7j7w-m548 | liquidjs | 10.25.7 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | DEBIAN-CVE-2026-48526 | pyjwt | no fix listed |
| Low | GHSA-xgmm-8j9v-c9wx | pyjwt | 2.13.0 |
| Low | GHSA-r4q5-vmmm-2653 | follow-redirects | 1.16.0 |
| Low | DEBIAN-CVE-2026-58051 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GHSA-jvwf-75h9-cwgg | protobufjs | 7.5.6 |
| Low | GHSA-qhmp-q7xh-99rh | github.com/ | 1.14.3 |
| Low | DEBIAN-CVE-2026-48959 | perl | no fix listed |
| Low | GHSA-fj3w-jwp8-x2g3 | fast-xml-parser | 5.3.8 |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | GHSA-4r6h-5v86-94p3 | liquidjs | 10.27.2 |
| Low | DEBIAN-CVE-2026-7598 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2026-6791 | glibc | no fix listed |
| Low | DEBIAN-CVE-2022-27943 | gcc-12 | no fix listed |
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-6253 | curl | no fix listed |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | DEBIAN-CVE-2024-47081 | requests | no fix listed |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | GHSA-93mf-426m-g6x9 | github.com/ | 1.12.4 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| uptime-kumapascaliskeVerified publisher | 3.0.0 | 2.0.2-slim-rootless | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.