phntom/codimd:2.4.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of phntom/codimd
phntom/codimd:2.4.3 resolved to 1b9aafbb62e6, scanned 14 Sept 2026: 495 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them codimd.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
495 distinct on this digest
Findings for digest 1b9aafbb62e6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-49j4-86m8-q2jw | mysql2 | 3.9.4 |
| Low | GO-2022-0435 | stdlib | 1.17.9 |
| Low | GHSA-9cx6-37pm-9jff | handlebars | 4.7.9 |
| Low | GHSA-vfrc-7r7c-w9mx | highlight.js | 9.18.2 |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | GO-2022-0288 | stdlib | 1.16.12 |
| Low | GHSA-qghr-877h-f9jh | markdown-pdf | no fix listed |
| Low | GHSA-5m6q-g25r-mvwx | node-forge | 1.4.0 |
| Low | GHSA-6g55-p6wh-862q | postcss | 8.5.12 |
| Low | GHSA-pmwg-cvhr-8vh7 | axios | 0.31.1 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | GHSA-22p9-wv53-3rq4 | linkify-it | 5.0.1 |
| Low | GHSA-j759-j44w-7fr8 | xmldom | no fix listed |
| Low | GO-2022-0236 | stdlib | 1.15.12 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-965w-775f-mr7g | xmldom | no fix listed |
| Low | GHSA-4f6x-49g2-99fm | mermaid | 8.11.0 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | GHSA-27p8-2357-5qqv | xmldom | no fix listed |
| Low | GHSA-4w3w-2rp5-g8jm | xmldom | no fix listed |
| Low | GHSA-c7q8-3ch8-vqpv | xmldom | no fix listed |
| Low | GHSA-w2rr-34g9-rvrj | xmldom | no fix listed |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | GHSA-8344-3jmq-59r6 | xmldom | no fix listed |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-hqq7-2q2v-82xq | @braintree/ | 6.0.0 |
| Low | GO-2021-0240 | stdlib | 1.15.13 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | GHSA-vghf-hv5q-vc2g | validator | 13.15.22 |
| Low | GO-2021-0242 | stdlib | 1.15.13 |
| Low | GHSA-x9w5-v3q2-3rhw | browserify-sign | 4.2.2 |
| Low | GHSA-mp7w-mhcv-673j | vega | 5.26.0 |
| Low | GHSA-mp7w-mhcv-673j | vega-selections | 5.4.2 |
| Low | GHSA-952p-6rrq-rcjv | micromatch | 4.0.8 |
| Low | GHSA-2m8v-j782-fhvr | socket.io-parser | 3.3.6 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | DLA-3363-1 | pcre2 | 10.32-5+deb10u1 |
| Low | GO-2021-0264 | stdlib | 1.16.10 |
| Low | GHSA-7f2v-3qq3-vvjf | vega-expression | 5.2.1 |
| Low | GHSA-7f2v-3qq3-vvjf | vega | 6.2.0 |
| Low | GO-2022-0969 | stdlib | 1.18.6 |
| Low | GHSA-776f-qx25-q3cc | xml2js | 0.5.0 |
| Low | DLA-3239-1 | git | 1:2.20.1-2+deb10u5 |
| Low | GHSA-fvcv-3m26-pcqx | axios | 0.31.0 |
| Low | GHSA-jmr9-qjv8-65gv | extract-zip | no fix listed |
| Low | DSA-5147-1 | dpkg | 1.19.8 |
| Low | DLA-3682-1 | ncurses | 6.1+20181013-2+deb10u5 |
| Low | GO-2021-0239 | stdlib | 1.15.13 |
| Low | GHSA-mqr2-w7wj-jjgr | mysql2 | 3.9.3 |