StackRadar

opencsghq/csghub-server:v2.5.1-ee container image

Docker Hub

Scanned 13 Oct 2026

Deployed by 1 of 18,108 indexed charts (latest versions) at this tag.Docker Hub all tags of opencsghq/csghub-server

opencsghq/csghub-server:v2.5.1-ee resolved to 20fbb6ea62a9, scanned 13 Oct 2026: 355 findings, 1 critical; deployed by 1 chart, among them csghub.

Radar Score

3,9961061293

355 findings on digest 20fbb6ea62a9 · scanned 13 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.5.1-eeresolves to20fbb6ea62a91 charttoday10612933,996

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

355 distinct on this digest

Findings for digest 20fbb6ea62a9 as scanned on 13 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 13 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-78409util-linux@2.38.1-5+deb12u3no fix listed
LowDEBIAN-CVE-2023-31439systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-33948jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2026-8674glibc@2.36-9+deb12u13no fix listed
LowDEBIAN-CVE-2023-31437systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-4438glibc@2.36-9+deb12u132.36-9+deb12u14
LowDEBIAN-CVE-2026-16599wget@1.21.3-1+deb12u1no fix listed
LowGHSA-w34q-cm8f-9c5xgo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.18.00.21.0
LowDEBIAN-CVE-2023-31438systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-4878libcap2@1:2.66-4+deb12u2+b21:2.66-4+deb12u3
LowDEBIAN-CVE-2026-13757p11-kit@0.24.1-2no fix listed
LowDEBIAN-CVE-2026-15534perl@5.36.0-7+deb12u3no fix listed
LowDEBIAN-CVE-2026-4105systemd@252.39-1~deb12u1252.39-1~deb12u2
LowDEBIAN-CVE-2025-14104util-linux@2.38.1-5+deb12u3no fix listed
LowDEBIAN-CVE-2026-56392coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2026-53615util-linux@2.38.1-5+deb12u3no fix listed
LowDEBIAN-CVE-2026-35189openssl@3.0.18-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-19542glibc@2.36-9+deb12u13no fix listed
LowDEBIAN-CVE-2026-56391coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2026-39956jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowGO-2025-3540github.com/redis/go-redis/v9@v9.5.59.6.3
LowGHSA-rg2x-37c3-w2rhgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowDEBIAN-CVE-2026-18938p11-kit@0.24.1-2no fix listed
LowDEBIAN-CVE-2025-9403jq@1.6-2.1+deb12u1no fix listed
LowDEBIAN-CVE-2017-14159openldap@2.5.13+dfsg-5no fix listed
LowDEBIAN-CVE-2017-18018coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2025-10966curl@7.88.1-10+deb12u14no fix listed
LowDEBIAN-CVE-2026-11850krb5@1.20.1-2+deb12u4no fix listed
LowDEBIAN-CVE-2026-15146wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-75805openssl@3.0.18-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-54370acl@2.3.1-3no fix listed
LowDEBIAN-CVE-2005-2541tar@1.34+dfsg-1.2+deb12u1no fix listed
LowDEBIAN-CVE-2026-5419gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
LowDEBIAN-CVE-2026-27171zlib@1:1.2.13.dfsg-1no fix listed
LowDEBIAN-CVE-2026-86805glibc@2.36-9+deb12u13no fix listed
LowGO-2026-4869stdlib@go1.26.01.25.9
LowGO-2026-6599stdlib@go1.26.01.26.9
LowGO-2026-6600stdlib@go1.26.01.26.9
LowGO-2026-6617stdlib@go1.26.01.26.9
LowGO-2026-6617golang.org/x/net@v0.57.00.60.0
LowDEBIAN-CVE-2026-33947jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2025-14017curl@7.88.1-10+deb12u14no fix listed
LowDEBIAN-CVE-2026-22795openssl@3.0.18-1~deb12u13.0.18-1~deb12u2
LowDEBIAN-CVE-2026-29111systemd@252.39-1~deb12u1252.39-1~deb12u2
LowDEBIAN-CVE-2024-10041pam@1.5.2-6+deb12u2no fix listed
LowDEBIAN-CVE-2026-15059systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-41256jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2026-45446openssl@3.0.18-1~deb12u13.0.20-1~deb12u2
LowDEBIAN-CVE-2026-40612jq@1.6-2.1+deb12u1no fix listed
LowDEBIAN-CVE-2026-44777jq@1.6-2.1+deb12u11.6-2.1+deb12u2

Used by

1 chart
ChartVersionTagContainers
csghubcsghubVerified publisher2.5.2v2.5.1-ee13

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 13 Oct 2026 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.