stashapp/stash:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of stashapp/stash
stashapp/stash:latest resolved to 24dbd7607174, scanned 14 Sept 2026: 1,102 findings, 8 critical, 4 on KEV; deployed by 1 chart, among them stash.
Radar Score
15,856824330740
1,102 findings on digest 24dbd7607174 · scanned 14 Sept 2026
KEV ×4 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
1,102 distinct on this digest
Findings for digest 24dbd7607174 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | UBUNTU-CVE-2023-3817 | openssl | 1.1.1f-1ubuntu2.20 |
| Medium | UBUNTU-CVE-2020-20445 | ffmpeg | 7:4.2.7-0ubuntu0.1 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | UBUNTU-CVE-2026-5201 | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.5+esm3 |
| Medium | GO-2021-0243 | stdlib | 1.15.14 |
| Medium | UBUNTU-CVE-2020-35525 | sqlite3 | 3.31.1-4ubuntu0.4 |
| Medium | UBUNTU-CVE-2025-27113 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.9 |
| Medium | UBUNTU-CVE-2026-33416 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 |
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | UBUNTU-CVE-2024-45491 | expat | 2.2.9-1ubuntu0.7 |
| Medium | GHSA-p782-xgp4-8hr8 | golang.org/ | 0.0.0-20220412211240-33da011f77ad |
| Medium | UBUNTU-CVE-2020-22037 | ffmpeg | 7:4.2.7-0ubuntu0.1 |
| Medium | UBUNTU-CVE-2023-29491 | ncurses | 6.2-0ubuntu2.1 |
| Medium | UBUNTU-CVE-2026-34180 | openssl | 1.1.1f-1ubuntu2.24+esm4 |
| Medium | UBUNTU-CVE-2026-7383 | openssl | 1.1.1f-1ubuntu2.24+esm4 |
| Medium | UBUNTU-CVE-2025-69720 | ncurses | 6.2-0ubuntu2.1+esm1 |
| Medium | UBUNTU-CVE-2020-35964 | ffmpeg | 7:4.2.7-0ubuntu0.1 |
| Medium | UBUNTU-CVE-2024-33601 | glibc | 2.31-0ubuntu9.16 |
| Medium | UBUNTU-CVE-2026-8376 | perl | 5.30.0-9ubuntu0.5+esm2 |
| Medium | UBUNTU-CVE-2020-22020 | ffmpeg | 7:4.2.7-0ubuntu0.1 |
| Medium | GHSA-4f99-4q7p-p3gh | github.com/ | 1.8.3 |
| Medium | UBUNTU-CVE-2020-22033 | ffmpeg | 7:4.2.7-0ubuntu0.1 |
| Medium | UBUNTU-CVE-2026-2447 | libvpx | no fix listed |
| Medium | UBUNTU-CVE-2024-31578 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm5 |
| Medium | UBUNTU-CVE-2018-18064 | cairo | no fix listed |
| Medium | UBUNTU-CVE-2022-0865 | tiff | 4.1.0+git191117-2ubuntu0.20.04.3 |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Medium | UBUNTU-CVE-2020-19143 | tiff | 4.1.0+git191117-2ubuntu0.20.04.2 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | UBUNTU-CVE-2023-4813 | glibc | 2.31-0ubuntu9.14 |
| Medium | UBUNTU-CVE-2022-2309 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| Medium | UBUNTU-CVE-2025-0938 | python3.8 | 3.8.10-0ubuntu1~20.04.16 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | UBUNTU-CVE-2023-38633 | librsvg | 2.48.9-1ubuntu0.20.04.4 |
| Medium | UBUNTU-CVE-2020-22219 | flac | 1.3.3-1ubuntu0.2 |
| Medium | UBUNTU-CVE-2023-34969 | dbus | no fix listed |
| Medium | UBUNTU-CVE-2022-42011 | dbus | 1.12.16-2ubuntu2.3 |
| Medium | UBUNTU-CVE-2022-42012 | dbus | 1.12.16-2ubuntu2.3 |
| Medium | UBUNTU-CVE-2020-36130 | aom | 1.0.0.errata1-3+deb11u1build0.20.04.1 |
| Medium | UBUNTU-CVE-2020-36135 | aom | 1.0.0.errata1-3+deb11u1build0.20.04.1 |
| Medium | UBUNTU-CVE-2020-16156 | perl | 5.30.0-9ubuntu0.3 |
| Medium | UBUNTU-CVE-2023-27043 | python3.8 | 3.8.10-0ubuntu1~20.04.12 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Medium | UBUNTU-CVE-2021-46829 | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.3 |
| Medium | UBUNTU-CVE-2020-22026 | ffmpeg | 7:4.2.7-0ubuntu0.1 |
| Medium | UBUNTU-CVE-2026-9669 | python3.8 | no fix listed |
| Medium | UBUNTU-CVE-2026-28388 | openssl | 1.1.1f-1ubuntu2.24+esm3 |
| Medium | UBUNTU-CVE-2025-69421 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Medium | UBUNTU-CVE-2023-1667 | libssh | 0.9.3-2ubuntu2.3 |