StackRadar

opencsghq/label-studio:v2.6.0 container image

Docker Hub

Scanned 16 Oct 2026

Deployed by 2 of 18,137 indexed charts (latest versions) at this tag.Docker Hub all tags of opencsghq/label-studio

opencsghq/label-studio:v2.6.0 resolved to 1f6764097129, scanned 16 Oct 2026: 336 findings, 0 critical; deployed by 2 charts, among them csghub and dataflow.

Radar Score

3,4210049286

336 findings on digest 1f6764097129 · scanned 16 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.6.0resolves to1f67640971292 chartstoday00492863,421

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

49 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 1f6764097129 as scanned on 16 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12+deb13u4no fix listed
MediumDEBIAN-CVE-2017-17740openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2018-20796glibc@2.41-12+deb13u4no fix listed
MediumDEBIAN-CVE-2015-3276openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.41-12+deb13u4no fix listed
MediumGHSA-38jv-5279-wg99urllib3@2.6.02.6.3
MediumDEBIAN-CVE-2019-9192glibc@2.41-12+deb13u4no fix listed
MediumGHSA-x99w-6fgc-pmfwnltk@3.9.13.10.3
MediumGHSA-7p94-766c-hgjpnltk@3.9.13.9.3
MediumDEBIAN-CVE-2023-45924libglvnd@1.7.0-1+b2no fix listed
MediumDEBIAN-CVE-2018-5709krb5@1.21.3-5+deb13u1no fix listed
MediumDEBIAN-CVE-2012-0039glib2.0@2.84.4-3~deb13u5no fix listed
MediumGHSA-wvqv-fj8w-qmhmdjango@5.1.155.2.17
MediumPYSEC-2026-99nltk@3.9.13.9.3
MediumDEBIAN-CVE-2018-6829libgcrypt20@1.11.0-7+deb13u1no fix listed
MediumGHSA-m4rf-3fr8-xwx3nltk@3.9.13.10.3
MediumDEBIAN-CVE-2026-19931curl@8.14.1-2+deb13u7no fix listed
MediumDEBIAN-CVE-2026-11856curl@8.14.1-2+deb13u7no fix listed
MediumPYSEC-2026-2120black@24.8.026.3.0
MediumGHSA-jm6w-m3j8-898gnltk@3.9.13.9.4
MediumDEBIAN-CVE-2011-3389gnutls28@3.8.9-3+deb13u4no fix listed
MediumGHSA-68j8-pq59-fqgmnltk@3.9.13.9.3
MediumDEBIAN-CVE-2026-10536curl@8.14.1-2+deb13u7no fix listed
MediumDEBIAN-CVE-2026-9079curl@8.14.1-2+deb13u7no fix listed
MediumDEBIAN-CVE-2026-66046expat@2.8.3-1~deb13u1no fix listed
MediumGHSA-386q-5hp3-95m9datamodel-code-generator@0.26.10.60.2
MediumDEBIAN-CVE-2019-1010024glibc@2.41-12+deb13u4no fix listed
MediumDEBIAN-CVE-2024-26461krb5@1.21.3-5+deb13u1no fix listed
MediumDEBIAN-CVE-2026-18924curl@8.14.1-2+deb13u7no fix listed
MediumDEBIAN-CVE-2023-45931mesa@25.0.7-2+deb13u1no fix listed
MediumDEBIAN-CVE-2026-93479nginx@1.26.3-3+deb13u9no fix listed
MediumGHSA-x5ph-mj9p-rfr8nltk@3.9.13.10.0
MediumPYSEC-2026-3750nltk@3.9.13.10.0
MediumGHSA-rhp5-r9x4-f5g2nltk@3.9.13.10.0
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.5.00.6.3
MediumDEBIAN-CVE-2026-15176nginx@1.26.3-3+deb13u9no fix listed
MediumGHSA-jm66-cg57-jjv5azure-core@1.29.51.38.0
MediumGHSA-7gcm-g887-7qv7protobuf@4.25.85.29.6
MediumGHSA-58pv-8j8x-9vj2jaraco-context@5.3.06.1.0
MediumPYSEC-2026-2237nltk@3.9.13.9.4
MediumGHSA-mf9v-mfxr-j63jurllib3@2.6.02.7.0
MediumDEBIAN-CVE-2019-1010025glibc@2.41-12+deb13u4no fix listed
MediumGHSA-whj4-6x5x-4v2jpillow@11.3.012.2.0
MediumPYSEC-2026-3717django@5.1.155.2.17
MediumDEBIAN-CVE-2026-97205nginx@1.26.3-3+deb13u9no fix listed
MediumGHSA-97qj-x29f-37w7nltk@3.9.13.10.3
MediumPYSEC-2026-3724nltk@3.9.13.9.4
MediumPYSEC-2026-3738nltk@3.9.13.10.3
MediumGHSA-h8wq-7xc4-p3qxnltk@3.9.13.9.3

Used by

2 charts
ChartVersionTagContainers
csghubcsghubVerified publisher2.6.0v2.6.01
dataflowcsghubVerified publisher2.6.0v2.6.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 16 Oct 2026 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.