louislam/uptime-kuma:2.5.4 container image
Docker HubScanned 16 Sept 2026
Deployed by 4 of 17,790 indexed charts (latest versions) at this tag.Docker Hub all tags of louislam/uptime-kuma
louislam/uptime-kuma:2.5.4 resolved to 917318f9d7be, scanned 16 Sept 2026: 3,029 findings, 3 critical, 3 on KEV; deployed by 4 charts, among them uptime-kuma, uptime-kuma and uptime-kuma.
Radar Score
3,029 findings on digest 917318f9d7be · scanned 16 Sept 2026
KEV ×3 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest 917318f9d7be as scanned on 16 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-87501 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-87599 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-11696 | chromium | 149.0.7827.102-1~deb12u1 |
| Low | DEBIAN-CVE-2026-87655 | chromium | no fix listed |
| Low | GO-2024-2888 | stdlib | 1.21.11 |
| Low | DEBIAN-CVE-2026-79016 | chromium | 152.0.7977.75-1~deb12u1 |
| Low | DEBIAN-CVE-2026-79049 | chromium | 152.0.7977.75-1~deb12u1 |
| Low | DEBIAN-CVE-2026-32778 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-86144 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-12033 | chromium | 149.0.7827.114-1~deb12u1 |
| Low | DEBIAN-CVE-2026-11701 | chromium | 149.0.7827.102-1~deb12u1 |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-87540 | chromium | no fix listed |
| Low | DEBIAN-CVE-2024-10041 | pam | no fix listed |
| Low | GHSA-cc9r-2j5m-2m83 | nodemailer | 9.1.0 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | DEBIAN-CVE-2026-17993 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-32776 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-17730 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17760 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17767 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17769 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17772 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17773 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17795 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-9985 | chromium | 148.0.7778.215-1~deb12u1 |
| Low | DEBIAN-CVE-2026-79237 | chromium | 152.0.7977.75-1~deb12u1 |
| Low | DEBIAN-CVE-2026-87656 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-9989 | chromium | 148.0.7778.215-1~deb12u1 |
| Low | DEBIAN-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-18495 | tiff | no fix listed |
| Low | DEBIAN-CVE-2026-17662 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-17693 | chromium | 151.0.7922.71-1~deb12u1 |
| Low | DEBIAN-CVE-2026-76041 | chromium | 151.0.7922.169-1~deb12u1 |
| Low | DEBIAN-CVE-2026-53797 | rsync | no fix listed |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-79050 | chromium | 152.0.7977.75-1~deb12u1 |
| Low | DEBIAN-CVE-2026-11678 | chromium | 149.0.7827.102-1~deb12u1 |
| Low | DEBIAN-CVE-2026-53800 | rsync | no fix listed |
| Low | DEBIAN-CVE-2026-87645 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-87649 | chromium | no fix listed |
| Low | DEBIAN-CVE-2025-68276 | avahi | no fix listed |
| Low | DEBIAN-CVE-2026-87605 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-14063 | chromium | 150.0.7871.46-1~deb12u1 |
| Low | DEBIAN-CVE-2026-79196 | chromium | 152.0.7977.75-1~deb12u1 |
| Low | DEBIAN-CVE-2026-87583 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-53796 | rsync | no fix listed |
| Low | GHSA-w9m9-85wc-3x92 | postcss-selector-parser | 7.1.3 |
| Low | DEBIAN-CVE-2026-87875 | cups | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 2.5.4 | 1 |
| uptime-kumahelmforgeVerified publisher | 1.5.13 | 2.5.4 | 1 |
| uptime-kumancsaVerified publisher | 1.7.2 | 2.5.4 | 1 |
| uptime-kumaschoenwald | 1.0.10 | 2.5.4unmeasured: HTTP 429 resolving manifest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.