StackRadar

stashapp/stash-box:latest container image

Docker Hub

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of stashapp/stash-box

stashapp/stash-box:latest resolved to a534c8afdf39, scanned 15 Sept 2026: 860 findings, 0 critical; deployed by 1 chart, among them stash-box.

Radar Score

8,10202105752

860 findings on digest a534c8afdf39 · scanned 15 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves toa534c8afdf391 chart8 days ago021057528,102

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

860 distinct on this digest

Findings for digest a534c8afdf39 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2025-5278coreutils@9.4-3ubuntu69.4-3ubuntu6.3
LowGO-2026-5856stdlib@go1.23.101.25.12
LowUBUNTU-CVE-2026-22795openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.7
LowUBUNTU-CVE-2026-33328vips@8.15.1-1.1build4no fix listed
LowUBUNTU-CVE-2026-35590vips@8.15.1-1.1build4no fix listed
LowUBUNTU-CVE-2026-47714libheif@1.17.6-1ubuntu4.11.17.6-1ubuntu4.6
LowGO-2025-4007stdlib@go1.23.101.24.9
LowGO-2026-6355golang.org/x/crypto@v0.36.00.56.0
LowUBUNTU-CVE-2026-62289libheif@1.17.6-1ubuntu4.11.17.6-1ubuntu4.7
LowUBUNTU-CVE-2026-25576imagemagick@8:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9
LowUBUNTU-CVE-2025-28162libpng1.6@1.6.43-5build11.6.43-5ubuntu0.4
LowUBUNTU-CVE-2025-28164libpng1.6@1.6.43-5build11.6.43-5ubuntu0.4
LowUBUNTU-CVE-2026-33902imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-6491vips@8.15.1-1.1build4no fix listed
LowGO-2026-4980stdlib@go1.23.101.25.10
LowUBUNTU-CVE-2026-42770openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.11
LowGO-2026-5039stdlib@go1.23.101.25.11
LowUBUNTU-CVE-2025-3360glib2.0@2.80.0-6ubuntu3.42.80.0-6ubuntu3.6
LowUBUNTU-CVE-2026-55059openexr@3.1.5-5.1build3no fix listed
LowUBUNTU-CVE-2026-41254lcms2@2.14-2build12.14-2ubuntu0.1
LowUBUNTU-CVE-2025-8114libssh@0.10.6-2build20.10.6-2ubuntu0.2
LowUBUNTU-CVE-2026-1484glib2.0@2.80.0-6ubuntu3.42.80.0-6ubuntu3.8
LowGO-2025-4013stdlib@go1.23.101.24.8
LowUBUNTU-CVE-2026-30883imagemagick@8:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8
LowGO-2025-3849stdlib@go1.23.101.23.12
LowGO-2026-4946stdlib@go1.23.101.25.9
LowUBUNTU-CVE-2026-45359imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-86421imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-70654vips@8.15.1-1.1build4no fix listed
LowUBUNTU-CVE-2026-54370acl@2.3.2-1build1.1no fix listed
LowGO-2026-5066golang.org/x/image@v0.22.00.43.0
LowUBUNTU-CVE-2026-56412expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2025-5918libarchive@3.7.2-2ubuntu0.43.7.2-2ubuntu0.6
LowGO-2026-4961golang.org/x/image@v0.22.00.42.0
LowUBUNTU-CVE-2026-42050imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-56131expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-50219expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-56367imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2025-15649perl@5.38.2-3.2ubuntu0.15.38.2-3.2ubuntu0.4
LowGO-2026-4603stdlib@go1.23.101.25.8
LowUBUNTU-CVE-2026-23865freetype@2.13.2+dfsg-1build32.13.2+dfsg-1ubuntu0.1
LowUBUNTU-CVE-2026-0988glib2.0@2.80.0-6ubuntu3.42.80.0-6ubuntu3.7
LowGO-2026-6303golang.org/x/crypto@v0.36.00.55.0
LowUBUNTU-CVE-2026-17573hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowUBUNTU-CVE-2025-48708ghostscript@10.02.1~dfsg1-0ubuntu7.610.02.1~dfsg1-0ubuntu7.7
LowGO-2026-6354golang.org/x/crypto@v0.36.00.56.0
LowUBUNTU-CVE-2026-29111systemd@255.4-1ubuntu8.6255.4-1ubuntu8.14
LowUBUNTU-CVE-2025-7039glib2.0@2.80.0-6ubuntu3.42.80.0-6ubuntu3.6
LowGO-2026-4982stdlib@go1.23.101.25.10
LowGO-2026-6091stdlib@go1.23.101.25.13

Used by

1 chart
ChartVersionTagContainers
stash-boxswuuper-githubVerified publisher0.1.1latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.