penpotapp/mcp:2.18.4 container image

Docker Hub

Scanned 24 Oct 2026

Deployed by 1 of 18,232 indexed charts (latest versions) at this tag.Docker Hub all tags of penpotapp/mcp

penpotapp/mcp:2.18.4 resolved to 1d6878c698af, scanned 24 Oct 2026: 50 findings, 0 critical; deployed by 1 chart, among them penpot.

Radar Score

50600644

50 findings on digest 1d6878c698af · scanned 24 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.18.4resolves to	1d6878c698af	1 chart	today	00644	506

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

50 distinct on this digest

Findings for digest 1d6878c698af as scanned on 24 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 24 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u4+dhi1	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4+dhi1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4+dhi1	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u4+dhi1	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4+dhi1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+dhi4	no fix listed
Low	GHSA-jqcg-44mw-7w3h	proxy-addr@2.0.7	2.0.8
Low	DEBIAN-CVE-2026-95619	gcc-14@14.2.0-19+dhi5	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-58mr-gqgx-xq4g	fast-uri@3.1.6	3.1.7
Low	GHSA-27r3-jxmh-p828	body-parser@2.3.0	2.4.0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-mrhx-c7xc-m3w5	zod@4.4.3	4.6.6
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-2vr4-cq9g-pvrc	ip-address@10.5.0	10.5.1
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-qw65-cvwx-89v3	fast-uri@3.1.6	3.1.7
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.5.0	10.5.1
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.5.0	10.7.1
Low	GHSA-wq5f-xc86-pv6w	sharp@0.35.4	0.35.5
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19+dhi5	no fix listed
Low	GHSA-h3mg-xc3c-68pw	ip-address@10.5.0	10.7.1
Low	GHSA-6qxp-vccf-f47h	@modelcontextprotocol/sdk@1.30.0	1.31.0
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-rxp7-6hxx-x8q5	ip-address@10.5.0	10.7.4
Low	GHSA-4mjr-xmp4-gh2g	qs@6.15.3	6.16.0
Low	DEBIAN-CVE-2026-8674	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-5r4p-p66f-jhc7	hono@4.13.5	4.13.11
Low	GHSA-w74x-v6f9-j3xg	fast-uri@3.1.6	3.1.9
Low	GHSA-46jr-4wx8-v453	@modelcontextprotocol/sdk@1.30.0	1.32.0
Low	DEBIAN-CVE-2026-19542	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+dhi4	no fix listed
Low	GHSA-rvq5-wwqv-78pq	@modelcontextprotocol/sdk@1.30.0	1.32.0
Low	GHSA-hrr3-gc8f-f4qj	fast-uri@3.1.6	3.1.8
Low	GHSA-6prh-2h8m-c8cw	@modelcontextprotocol/sdk@1.30.0	1.32.0
Low	GHSA-x5fp-wj9c-mxmx	qs@6.15.3	6.16.0
Low	GHSA-jggr-w7fw-pc2j	fast-copy@4.0.4	4.1.0
Low	DEBIAN-CVE-2026-86805	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-hxh3-vqpv-xpqv	hono@4.13.5	4.13.7
Low	GHSA-wjr9-j795-jxcr	fast-uri@3.1.6	3.1.9
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-89092	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-18374	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-97399	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	GHSA-333x-w4r6-6crp	fast-uri@3.1.6	3.1.9
Low	GHSA-xhq7-xmqj-769h	fast-uri@3.1.6	3.1.9
Low	DEBIAN-CVE-2026-95818	glibc@2.41-12+deb13u4+dhi1	no fix listed
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u4+dhi1	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
penpotpenpotOfficialVerified publisher	1.11.4	2.18.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.