stashapp/stash-box:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of stashapp/stash-box
stashapp/stash-box:latest resolved to a534c8afdf39, scanned 14 Sept 2026: 851 findings, 1 critical; deployed by 1 chart, among them stash-box.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
851 distinct on this digest
Findings for digest a534c8afdf39 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-59187 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-6429 | curl | 8.5.0-2ubuntu10.9 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 3.0.13-0ubuntu3.7 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2026-55577 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2025-10148 | curl | 8.5.0-2ubuntu10.7 |
| Low | UBUNTU-CVE-2026-45031 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2025-50952 | openjpeg2 | 2.5.0-2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-24401 | avahi | 0.8-13ubuntu6.2 |
| Low | UBUNTU-CVE-2026-46523 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-1965 | curl | 8.5.0-2ubuntu10.8 |
| Low | UBUNTU-CVE-2026-32636 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2025-68973 | gnupg2 | 2.4.4-2ubuntu17.4 |
| Low | UBUNTU-CVE-2026-11979 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-7168 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-86140 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-19024 | hdf5 | no fix listed |
| Low | UBUNTU-CVE-2026-25986 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | UBUNTU-CVE-2026-59847 | libssh | 0.10.6-2ubuntu0.5 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | UBUNTU-CVE-2026-68516 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-3783 | curl | 8.5.0-2ubuntu10.8 |
| Low | UBUNTU-CVE-2026-4873 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-68513 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-26983 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-34743 | xz-utils | 5.6.1+really5.4.5-1ubuntu0.3 |
| Low | UBUNTU-CVE-2026-22693 | harfbuzz | no fix listed |
| Low | UBUNTU-CVE-2026-54411 | pam | 1.5.3-5ubuntu5.6 |
| Low | UBUNTU-CVE-2026-45664 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-25988 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-25983 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | UBUNTU-CVE-2026-25210 | expat | 2.6.1-2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-25798 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-33899 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-19487 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-4878 | libcap2 | 1:2.66-5ubuntu2.4 |
| Low | UBUNTU-CVE-2025-2153 | hdf5 | no fix listed |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2025-2308 | hdf5 | no fix listed |
| Low | UBUNTU-CVE-2026-24484 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9 |
| Low | UBUNTU-CVE-2026-55594 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2025-2310 | hdf5 | no fix listed |
| Low | UBUNTU-CVE-2026-52584 | jpeg-xl | no fix listed |
| Low | UBUNTU-CVE-2026-25799 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-34979 | cups | 2.4.7-1.2ubuntu7.13 |
| Low | UBUNTU-CVE-2026-25795 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-25796 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | GHSA-9h8m-3fm2-qjrq | go.opentelemetry.io/ | 1.40.0 |