stashapp/stash:latest container image
Docker HubScanned 15 Sept 2026
Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of stashapp/stash
stashapp/stash:latest resolved to 24dbd7607174, scanned 15 Sept 2026: 1,112 findings, 7 critical, 4 on KEV; deployed by 1 chart, among them stash.
Radar Score
15,917725330750
1,112 findings on digest 24dbd7607174 · scanned 15 Sept 2026
KEV ×4 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
1,112 distinct on this digest
Findings for digest 24dbd7607174 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-27456 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2025-8277 | libssh | 0.9.3-2ubuntu2.5+esm3 |
| Low | UBUNTU-CVE-2026-81893 | gdk-pixbuf | no fix listed |
| Low | UBUNTU-CVE-2026-0992 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm4 |
| Low | UBUNTU-CVE-2026-45186 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-89160 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-32776 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-41080 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-71212 | ffmpeg | no fix listed |
| Low | UBUNTU-CVE-2025-4878 | libssh | 0.9.3-2ubuntu2.5+esm1 |
| Low | UBUNTU-CVE-2025-69418 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2025-1795 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm1 |
| Low | UBUNTU-CVE-2025-8732 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm4 |
| Low | UBUNTU-CVE-2025-8961 | tiff | 4.1.0+git191117-2ubuntu0.20.04.14+esm2 |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | GO-2026-4962 | golang.org/ | 0.39.0 |
| Low | UBUNTU-CVE-2026-59846 | libssh | no fix listed |
| Low | GO-2026-6179 | golang.org/ | 0.40.0 |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | UBUNTU-CVE-2025-6199 | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.5+esm1 |
| Low | UBUNTU-CVE-2025-6141 | ncurses | 6.2-0ubuntu2.1+esm2 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6278 | github.com/ | 1.5.3 |
| Low | USN-5089-1 | ca-certificates | 20210119~20.04.2 |
| Low | USN-5473-1 | ca-certificates | 20211016~20.04.1 |
| Low | USN-6105-1 | ca-certificates | 20230311ubuntu0.20.04.1 |
| Low | USN-6449-2 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm4 |
| Low | USN-6663-1 | openssl | 1.1.1f-1ubuntu2.22 |
| Low | USN-7034-1 | ca-certificates | 20240203~20.04.1 |
| Low | USN-8091-1 | util-linux | 2.34-0.1ubuntu9.6+esm1 |
| Low | USN-8688-1 | pam | 1.3.1-5ubuntu4.7+esm1 |
| Low | UBUNTU-CVE-2025-13462 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2021-27645 | glibc | 2.31-0ubuntu9.7 |
| Low | UBUNTU-CVE-2026-0965 | libssh | 0.9.3-2ubuntu2.5+esm3 |
| Low | UBUNTU-CVE-2025-66382 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-1376 | elfutils | no fix listed |
| Low | UBUNTU-CVE-2025-6170 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm1 |
| Low | UBUNTU-CVE-2026-24515 | expat | 2.2.9-1ubuntu0.8+esm1 |
| Low | UBUNTU-CVE-2026-40228 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-32778 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-6192 | openjpeg2 | no fix listed |
| Low | UBUNTU-CVE-2023-4016 | procps | 2:3.3.16-1ubuntu2.4 |
| Low | UBUNTU-CVE-2025-30258 | gnupg2 | 2.2.19-3ubuntu2.4 |
| Low | UBUNTU-CVE-2025-9165 | tiff | 4.1.0+git191117-2ubuntu0.20.04.14+esm2 |
| Low | UBUNTU-CVE-2026-15310 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-1485 | glib2.0 | no fix listed |
| Low | GHSA-q7pp-wcgr-pffx | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2026-53910 | diffutils | 1:3.7-3ubuntu0.1~esm1 |