StackRadar

opencsghq/csghub-server:v2.5.1-ee container image

Docker Hub

Scanned 13 Oct 2026

Deployed by 1 of 18,108 indexed charts (latest versions) at this tag.Docker Hub all tags of opencsghq/csghub-server

opencsghq/csghub-server:v2.5.1-ee resolved to 20fbb6ea62a9, scanned 13 Oct 2026: 355 findings, 1 critical; deployed by 1 chart, among them csghub.

Radar Score

3,9961061293

355 findings on digest 20fbb6ea62a9 · scanned 13 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.5.1-eeresolves to20fbb6ea62a91 charttoday10612933,996

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

355 distinct on this digest

Findings for digest 20fbb6ea62a9 as scanned on 13 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 13 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDEBIAN-CVE-2026-8927curl@7.88.1-10+deb12u14no fix listed
MediumDEBIAN-CVE-2026-27135nghttp2@1.52.0-1+deb12u21.52.0-1+deb12u3
MediumDEBIAN-CVE-2026-28388openssl@3.0.18-1~deb12u13.0.19-1~deb12u2
MediumDEBIAN-CVE-2026-3833gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
MediumGHSA-xrqc-7xgx-c9vhgithub.com/argoproj/argo-workflows/v3@v3.6.123.6.14
MediumDEBIAN-CVE-2026-28387openssl@3.0.18-1~deb12u13.0.19-1~deb12u2
MediumGHSA-xw59-hvm2-8pj6github.com/modelcontextprotocol/go-sdk@v1.2.01.4.0
MediumGO-2026-4601stdlib@go1.26.01.25.8
MediumGO-2026-4981stdlib@go1.26.01.25.10
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u13no fix listed
MediumDEBIAN-CVE-2026-28389openssl@3.0.18-1~deb12u13.0.19-1~deb12u2
MediumDEBIAN-CVE-2026-28390openssl@3.0.18-1~deb12u13.0.19-1~deb12u2
LowGO-2026-4977stdlib@go1.26.01.25.10
LowDEBIAN-CVE-2026-57433perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowDEBIAN-CVE-2026-40355krb5@1.20.1-2+deb12u41.20.1-2+deb12u5
LowGO-2026-4986stdlib@go1.26.01.25.10
LowDEBIAN-CVE-2026-40356krb5@1.20.1-2+deb12u41.20.1-2+deb12u5
LowGO-2026-4918stdlib@go1.26.01.25.10
LowDEBIAN-CVE-2026-13221perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowDEBIAN-CVE-2026-58469wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-42496perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowGO-2026-5751github.com/argoproj/argo-workflows/v3@v3.6.12no fix listed
LowDEBIAN-CVE-2026-42013gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
LowDEBIAN-CVE-2026-9076openssl@3.0.18-1~deb12u13.0.20-1~deb12u2
LowDEBIAN-CVE-2026-45445openssl@3.0.18-1~deb12u13.0.20-1~deb12u2
LowDEBIAN-CVE-2026-66032libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowDEBIAN-CVE-2024-10524wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-12087perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowDEBIAN-CVE-2026-4046glibc@2.36-9+deb12u132.36-9+deb12u14
LowDEBIAN-CVE-2026-5773curl@7.88.1-10+deb12u147.88.1-10+deb12u15
LowDEBIAN-CVE-2026-54411pam@1.5.2-6+deb12u2no fix listed
LowDEBIAN-CVE-2026-7598libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowGHSA-5jv8-h7qh-rf5pgithub.com/argoproj/argo-workflows/v3@v3.6.12no fix listed
LowDEBIAN-CVE-2026-82560perl@5.36.0-7+deb12u3no fix listed
LowGO-2026-4599stdlib@go1.26.01.26.1
LowDEBIAN-CVE-2026-54874openssl@3.0.18-1~deb12u13.0.22-1~deb12u1
LowDEBIAN-CVE-2023-50495ncurses@6.4-4no fix listed
LowGO-2026-4870stdlib@go1.26.01.25.9
LowGO-2026-4971stdlib@go1.26.01.25.10
LowGHSA-3775-99mw-8rp4github.com/argoproj/argo-workflows/v3@v3.6.123.7.14
LowDEBIAN-CVE-2026-0915glibc@2.36-9+deb12u132.36-9+deb12u14
LowGO-2026-4947stdlib@go1.26.01.25.9
LowDEBIAN-CVE-2026-48959perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowDEBIAN-CVE-2021-31879wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-40164jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2025-69419openssl@3.0.18-1~deb12u13.0.18-1~deb12u2
LowGO-2026-5037stdlib@go1.26.01.25.11
LowGO-2026-5235github.com/argoproj/argo-workflows/v3@v3.6.12no fix listed
LowGO-2026-6603golang.org/x/net@v0.57.00.60.0
LowGO-2026-6603stdlib@go1.26.01.26.9

Used by

1 chart
ChartVersionTagContainers
csghubcsghubVerified publisher2.5.2v2.5.1-ee13

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 13 Oct 2026 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.