semaphoreui/semaphore:v2.9.64 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of semaphoreui/semaphore
semaphoreui/semaphore:v2.9.64 resolved to 5b50bc11833f, scanned 14 Sept 2026: 258 findings, 2 critical; deployed by 1 chart, among them ansible-semaphore.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
258 distinct on this digest
Findings for digest 5b50bc11833f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-qvrw-v9rv-5rjx | aiohttp | 3.9.0 |
| Low | GHSA-8495-4g3g-x7pr | aiohttp | 3.10.11 |
| Low | GHSA-h5c8-rqwp-cp95 | jinja2 | 3.1.3 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-c6gw-w398-hv78 | github.com/ | 3.0.4 |
| Low | GHSA-hc8v-wwc9-vgxm | github.com/ | 5.19.2 |
| Low | PYSEC-2026-2106 | aiohttp | 3.14.0 |
| Low | GHSA-3wq7-rqq7-wx6j | aiohttp | 3.13.4 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | GHSA-fh55-r93g-j68g | aiohttp | 3.13.3 |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.4-r3 |
| Low | PYSEC-2026-2113 | aiohttp | 3.14.1 |
| Low | GHSA-54jq-c3m8-4m76 | aiohttp | 3.13.3 |
| Low | PYSEC-2026-2112 | aiohttp | 3.14.1 |
| Low | PYSEC-2026-237 | aiohttp | 3.14.1 |
| Low | GHSA-mfx4-hv73-q22v | aiohttp | 3.14.2 |
| Low | GHSA-cq5v-8q36-5273 | aiohttp | 3.14.3 |
| Low | GHSA-m3xc-h892-ggx6 | github.com/ | 5.9.0 |
| Low | PYSEC-2026-3554 | cryptography | 49.0.0 |
| Low | GHSA-w8p5-mx5w-cpqj | ansible-core | 2.16.19rc1 |
| Low | GHSA-2vrm-gr82-f7m5 | aiohttp | 3.13.4 |
| Low | GHSA-qgq7-7hm3-q39j | github.com/ | 5.19.2 |
| Low | GHSA-q9hv-hpm4-hj6x | github.com/ | 1.6.3 |
| Low | GHSA-mq44-7p77-q5h7 | aiohttp | 3.14.2 |
| Low | GHSA-hg6j-4rv6-33pg | aiohttp | 3.14.0 |
| Low | GHSA-mwh4-6h8g-pg8w | aiohttp | 3.13.4 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | GHSA-mqqc-3gqh-h2x8 | aiohttp | 3.13.3 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | GHSA-99w6-3xph-cx78 | ansible-core | 2.16.14rc1 |
| Low | ALPINE-CVE-2024-56326 | py3-jinja2 | 3.1.5-r0 |
| Low | GHSA-69f9-5gxw-wvc2 | aiohttp | 3.13.3 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | GHSA-cpwx-vrp4-4pq7 | jinja2 | 3.1.6 |
| Low | GHSA-9548-qrrj-x5pj | aiohttp | 3.12.14 |
| Low | GHSA-hpj7-wq8m-9hgp | aiohttp | 3.14.1 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | ALPINE-CVE-2024-2004 | curl | 8.7.1-r0 |
| Low | ALPINE-CVE-2023-42364 | busybox | 1.36.1-r7 |
| Low | GHSA-c427-h43c-vf67 | aiohttp | 3.13.4 |
| Low | ALPINE-CVE-2023-42363 | busybox | 1.36.1-r7 |
| Low | PYSEC-2026-2104 | aiohttp | 3.14.0 |
| Low | GHSA-ww3m-ffrm-qvqv | ansible-core | no fix listed |
| Low | ALPINE-CVE-2023-42366 | busybox | 1.36.1-r6 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| ansible-semaphoresergiotocaliniVerified publisher | 1.2.0 | v2.9.64 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.