StackRadar

opencsghq/label-studio:v2.6.0 container image

Docker Hub

Scanned 16 Oct 2026

Deployed by 2 of 18,137 indexed charts (latest versions) at this tag.Docker Hub all tags of opencsghq/label-studio

opencsghq/label-studio:v2.6.0 resolved to 1f6764097129, scanned 16 Oct 2026: 336 findings, 0 critical; deployed by 2 charts, among them csghub and dataflow.

Radar Score

3,4210049286

336 findings on digest 1f6764097129 · scanned 16 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.6.0resolves to1f67640971292 chartstoday00492863,421

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

336 distinct on this digest

Findings for digest 1f6764097129 as scanned on 16 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-8926curl@8.14.1-2+deb13u7no fix listed
LowDEBIAN-CVE-2026-6653libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowGHSA-c8rr-9gxc-jprvujson@5.8.05.12.0
LowDEBIAN-CVE-2026-77214expat@2.8.3-1~deb13u1no fix listed
LowGHSA-3936-cmfr-pm3mblack@24.8.026.3.1
LowGHSA-qx2g-xrx7-vfh8nltk@3.9.13.10.1
LowGHSA-cfh3-3jmp-rvhcpillow@11.3.012.1.1
LowGHSA-rgxp-2hwp-jwggpyarrow@22.0.023.0.1
LowGHSA-62p4-gmf7-7g93pillow@11.3.012.3.0
LowGHSA-wgvc-ghv9-3pmmujson@5.8.05.12.0
LowGHSA-6ww7-3frv-cqxhnltk@3.9.13.10.3
LowDEBIAN-CVE-2025-1352elfutils@0.192-4no fix listed
LowDEBIAN-CVE-2026-54411pam@1.7.0-5no fix listed
LowDEBIAN-CVE-2026-74860libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowGHSA-c38f-wx89-p2xgujson@5.8.05.12.1
LowGHSA-p4gq-832x-fm9vnltk@3.9.13.10.0
LowDEBIAN-CVE-2026-82560perl@5.40.1-6+deb13u1no fix listed
LowDEBIAN-CVE-2026-93990expat@2.8.3-1~deb13u1no fix listed
LowGHSA-3gq4-3j92-5w49nltk@3.9.13.10.3
LowGHSA-8ppf-4f7h-5ppjpyasn1@0.5.00.6.4
LowGHSA-hm4w-wwcw-mr6rpyasn1@0.5.00.6.4
LowGHSA-m4p7-r5rc-7g4jpyasn1@0.5.00.6.4
LowGHSA-vjc4-5qp5-m44jpillow@11.3.012.3.0
LowGHSA-p4rw-rvv2-7xwrnltk@3.9.13.10.3
LowGHSA-xj96-63gp-2gmrpillow@11.3.012.3.0
LowGHSA-w3v8-gmh9-3wv7nltk@3.9.13.10.3
LowGHSA-wf93-45jw-7689pip@25.1.126.1.2
LowDEBIAN-CVE-2026-80229curl@8.14.1-2+deb13u7no fix listed
LowGHSA-vxq7-64xx-v4gwurllib3@2.6.02.8.0
LowDEBIAN-CVE-2009-4487nginx@1.26.3-3+deb13u9no fix listed
LowDEBIAN-CVE-2024-2236libgcrypt20@1.11.0-7+deb13u1no fix listed
LowGHSA-82r6-8w77-94w6anyio@4.2.04.14.2
LowGHSA-8359-h9fx-j6v9datamodel-code-generator@0.26.10.62.0
LowGHSA-pwgv-4x5q-6m9fsqlparse@0.5.00.6.0
LowGHSA-27vj-qcqg-25rcfsspec@2026.2.02026.6.0
LowGHSA-r6ph-v2qm-q3c2cryptography@44.0.246.0.5
LowGHSA-954p-556p-r752datamodel-code-generator@0.26.10.61.0
LowDEBIAN-CVE-2025-69720ncurses@6.5+20250216-2no fix listed
LowDEBIAN-CVE-2026-24882gnupg2@2.4.7-21+deb13u1no fix listed
LowGHSA-rfr2-mq9m-x2qxdatamodel-code-generator@0.26.10.61.0
LowGHSA-5578-w22f-pfx9datamodel-code-generator@0.26.10.64.0
LowDEBIAN-CVE-2026-82209curl@8.14.1-2+deb13u7no fix listed
LowDEBIAN-CVE-2026-85091zlib@1:1.3.dfsg+really1.3.1-1+b1no fix listed
LowDEBIAN-CVE-2026-80255curl@8.14.1-2+deb13u7no fix listed
LowDEBIAN-CVE-2026-13608curl@8.14.1-2+deb13u7no fix listed
LowPYSEC-2026-3740nltk@3.9.13.10.3
LowDEBIAN-CVE-2026-9080curl@8.14.1-2+deb13u7no fix listed
LowDEBIAN-CVE-2026-9538perl@5.40.1-6+deb13u1no fix listed
LowDEBIAN-CVE-2020-15719openldap@2.6.10+dfsg-1no fix listed
LowGHSA-45hq-cxwh-f6vcpillow@11.3.012.3.0

Used by

2 charts
ChartVersionTagContainers
csghubcsghubVerified publisher2.6.0v2.6.01
dataflowcsghubVerified publisher2.6.0v2.6.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 16 Oct 2026 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.