phntom/codimd:2.4.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of phntom/codimd
phntom/codimd:2.4.3 resolved to 1b9aafbb62e6, scanned 14 Sept 2026: 495 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them codimd.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
495 distinct on this digest
Findings for digest 1b9aafbb62e6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | GHSA-qjx8-664m-686j | js-cookie | 3.0.7 |
| Medium | GHSA-cpq7-6gpm-g9rc | cipher-base | 1.0.5 |
| Medium | GHSA-3mfm-83xf-c92r | handlebars | 4.7.9 |
| Medium | GHSA-xhpv-hc6g-r9c6 | handlebars | 4.7.9 |
| Medium | GHSA-566m-qj78-rww5 | postcss | 7.0.36 |
| Medium | GHSA-5fg8-2547-mr8q | xmldom | no fix listed |
| Medium | GHSA-v8fg-2rw7-q452 | sequelize | 6.37.4 |
| Medium | GHSA-4mxg-3p6v-xgq3 | passport-saml | no fix listed |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 0.32.0 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-v638-q856-grg8 | mathjax | no fix listed |
| Medium | GHSA-f6ww-3ggp-fr8h | xmldom | no fix listed |
| Medium | DLA-3152-1 | glibc | 2.28-10+deb10u2 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 6.2.4 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Medium | GHSA-25h7-pfq9-p65f | flatted | 3.4.0 |
| Medium | GHSA-p3rp-vmj9-gv6v | mermaid | 8.13.8 |
| Medium | GHSA-pf86-5x62-jrwf | axios | 0.31.1 |
| Medium | GHSA-vh95-rmgr-6w4m | minimist | 0.2.1 |
| Medium | GHSA-677m-j7p3-52f9 | socket.io-parser | 3.3.5 |
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-rhx6-c78j-4q9w | path-to-regexp | 0.1.12 |
| Low | GHSA-hj48-42vr-x3v9 | path-parse | 1.0.7 |
| Low | GHSA-cfm4-qjh2-4765 | node-forge | 1.3.0 |
| Low | GHSA-6vfc-qv3f-vr6c | markdown-it | 12.3.2 |
| Low | GHSA-v62p-rq8g-8h59 | pbkdf2 | 3.1.3 |
| Low | DSA-5122-1 | gzip | 1.9-3+deb10u1 |
| Low | DSA-5123-1 | xz-utils | 5.2.4-1+deb10u1 |
| Low | GHSA-62hf-57xw-28j9 | axios | 0.31.1 |
| Low | GHSA-h7cp-r72f-jxh6 | pbkdf2 | 3.1.3 |
| Low | GHSA-x6wf-f3px-wcqx | xmldom | no fix listed |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GO-2021-0263 | stdlib | 1.16.10 |
| Low | GO-2023-1571 | stdlib | 1.19.6 |
| Low | GHSA-3g43-6gmg-66jw | axios | 0.31.1 |
| Low | GHSA-cxjh-pqwp-8mfp | follow-redirects | 1.15.6 |
| Low | GHSA-ph9p-34f9-6g65 | tmp | 0.2.6 |
| Low | GHSA-554w-wpv2-vw27 | node-forge | 1.3.2 |
| Low | GHSA-hfxv-24rg-xrqf | axios | 0.32.0 |
| Low | GHSA-j5f8-grm9-p9fc | axios | 0.32.0 |
| Low | DLA-3288-1 | curl | 7.64.0-4+deb10u4 |
| Low | GHSA-829q-m3qg-ph8r | vega-selections | 5.6.3 |
| Low | GHSA-25hc-qcg6-38wj | socket.io | 2.5.1 |
| Low | GHSA-qgmg-gppg-76g5 | validator | 13.7.0 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |