penpotapp/mcp:2.17.2 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of penpotapp/mcp
penpotapp/mcp:2.17.2 resolved to 84f3f07ead11, scanned 14 Sept 2026: 136 findings, 0 critical; deployed by 1 chart, among them penpot.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
133 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 84f3f07ead11 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-57433 | perl | 5.40.1-7ubuntu0.3 |
| Low | GHSA-vxpw-j846-p89q | undici | 6.27.0 |
| Low | UBUNTU-CVE-2026-13221 | perl | 5.40.1-7ubuntu0.3 |
| Low | UBUNTU-CVE-2026-66032 | libssh2 | 1.11.1-1ubuntu0.26.04.4 |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80255 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-12087 | perl | 5.40.1-7ubuntu0.3 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 5.0.9 |
| Low | UBUNTU-CVE-2026-13608 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-66033 | libssh2 | 1.11.1-1ubuntu0.26.04.4 |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | UBUNTU-CVE-2024-2236 | libgcrypt20 | 1.12.0-2ubuntu1.1 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-66035 | libssh2 | 1.11.1-1ubuntu0.26.04.4 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 5.0.8 |
| Low | UBUNTU-CVE-2026-9538 | perl | no fix listed |
| Low | GHSA-v2hh-gcrm-f6hx | fast-uri | 3.1.4 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | UBUNTU-CVE-2026-85091 | zlib | no fix listed |
| Low | UBUNTU-CVE-2026-42497 | perl | no fix listed |
| Low | GHSA-vq4v-j7r6-jq4m | pnpm | 11.11.0 |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | UBUNTU-CVE-2026-8932 | curl | 8.18.0-1ubuntu2.5 |
| Low | UBUNTU-CVE-2026-75803 | openssl | 3.5.5-1ubuntu3.5 |
| Low | GHSA-4c8g-83qw-93j6 | fast-uri | 3.1.3 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | UBUNTU-CVE-2026-48959 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.43-2ubuntu2.4 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-pm4m-ph32-ghv5 | js-yaml | 5.2.2 |
| Low | GHSA-c59q-g84q-2gj5 | pnpm | 11.11.0 |
| Low | GHSA-4xrf-jv44-h6hh | ip-address | 10.2.2 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.40.1-7ubuntu0.3 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-724g-mxrg-4qvm | js-yaml | 5.2.1 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GHSA-fph4-wmhf-6fwf | fast-uri | 3.1.6 |
| Low | GHSA-gqvv-2mrq-wpjv | hono | 4.13.5 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-8j4g-w8fx-2239 | hono | 4.12.34 |
| Low | GHSA-crvj-82cr-hjcx | hono | 4.13.5 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |