stashapp/stash:latest container image

Docker Hub

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of stashapp/stash

stashapp/stash:latest resolved to 24dbd7607174, scanned 15 Sept 2026: 1,112 findings, 7 critical, 4 on KEV; deployed by 1 chart, among them stash.

Radar Score

15,917725330750

1,112 findings on digest 24dbd7607174 · scanned 15 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	24dbd7607174	1 chart	9 days ago	725330750	15,917

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

1,112 distinct on this digest

Findings for digest 24dbd7607174 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-9714	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.10+esm2
Low	UBUNTU-CVE-2026-56409	expat@2.2.9-1build1	no fix listed
Low	GO-2026-5972	stdlib@go1.13.15	1.25.13
Low	GO-2026-6088	stdlib@go1.13.15	1.25.13
Low	GO-2026-6089	stdlib@go1.13.15	1.25.13
Low	GO-2026-6090	stdlib@go1.13.15	1.25.13
Low	UBUNTU-CVE-2025-8176	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.14+esm1
Low	UBUNTU-CVE-2026-50813	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	GO-2026-5038	stdlib@go1.13.15	1.25.11
Low	UBUNTU-CVE-2026-86139	libxml2@2.9.10+dfsg-5	no fix listed
Low	UBUNTU-CVE-2025-50422	cairo@1.16.0-4ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-16768	gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1
Low	GO-2026-5942	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.56.0
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.36.0
Low	UBUNTU-CVE-2026-11850	krb5@1.17-6ubuntu4.1	no fix listed
Low	UBUNTU-CVE-2026-56132	expat@2.2.9-1build1	no fix listed
Low	GO-2025-4012	stdlib@go1.13.15	1.24.8
Low	GO-2025-3956	stdlib@go1.13.15	1.23.12
Low	UBUNTU-CVE-2026-15588	glib2.0@2.64.6-1~ubuntu20.04.3	no fix listed
Low	UBUNTU-CVE-2025-8058	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	GO-2026-4440	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.45.0
Low	UBUNTU-CVE-2024-11168	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.14
Low	GO-2025-4011	stdlib@go1.13.15	1.24.8
Low	GO-2025-4015	stdlib@go1.13.15	1.24.8
Low	GO-2026-6218	stdlib@go1.13.15	1.25.13
Low	UBUNTU-CVE-2021-28429	ffmpeg@7:4.2.4-1ubuntu0.1	7:4.2.7-0ubuntu0.1
Low	GHSA-w67g-5rqw-f597	github.com/gorilla/websocket@v1.4.2	1.5.3
Low	GO-2026-4441	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.45.0
Low	UBUNTU-CVE-2026-40930	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm3
Low	UBUNTU-CVE-2025-64506	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2013-4235	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4
Low	UBUNTU-CVE-2025-45582	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-15534	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4
Low	GO-2025-3373	stdlib@go1.13.15	1.22.11
Low	GO-2026-5970	golang.org/x/text@v0.3.2	0.39.0
Low	PYSEC-2026-2275	requests@2.22.0	2.33.0
Low	UBUNTU-CVE-2025-8291	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.18+esm3
Low	UBUNTU-CVE-2026-90781	alsa-lib@1.2.2-2.1ubuntu2.3	no fix listed
Low	UBUNTU-CVE-2026-52295	ffmpeg@7:4.2.4-1ubuntu0.1	no fix listed
Low	GO-2025-4155	stdlib@go1.13.15	1.24.11
Low	GO-2024-2888	stdlib@go1.13.15	1.21.11
Low	UBUNTU-CVE-2026-86144	libxml2@2.9.10+dfsg-5	no fix listed
Low	GO-2025-4008	stdlib@go1.13.15	1.24.8
Low	GO-2025-4010	stdlib@go1.13.15	1.24.8
Low	UBUNTU-CVE-2024-10041	pam@1.3.1-5ubuntu4.1	no fix listed
Low	UBUNTU-CVE-2026-59850	libssh@0.9.3-2ubuntu2.1	no fix listed
Low	GO-2023-1840	stdlib@go1.13.15	1.19.10
Low	UBUNTU-CVE-2025-8851	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.14+esm1
Low	GO-2026-6222	golang.org/x/image@v0.0.0-20190802002840-cff245a6509b	0.45.0

Used by

1 chart

Chart	Version	Tag	Containers
stashgeek-cookbookVerified publisher	3.4.2	latest	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.