supabase/storage-api:v1.12.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of supabase/storage-api

supabase/storage-api:v1.12.0 resolved to f983fb50bd95, scanned 14 Sept 2026: 159 findings, 1 critical; deployed by 1 chart, among them supabase.

Radar Score

2,0341236120

159 findings on digest f983fb50bd95 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v1.12.0resolves to	f983fb50bd95	1 chart	8 days ago	1236120	2,034

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

120 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest f983fb50bd95 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-fj3w-jwp8-x2g3	fast-xml-parser@4.4.1	4.5.4
Low	GHSA-w5hq-g745-h8pq	uuid@9.0.1	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@18.0.6	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.20.1	7.26.10
Low	GHSA-3p68-rc4w-qgx5	axios@1.7.4	1.15.0
Low	GHSA-jqh4-m9w3-8hp9	axios@1.7.4	1.18.0
Low	ALPINE-CVE-2025-26519	musl@1.2.5-r0	1.2.5-r1
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	ALPINE-CVE-2024-12718	python3@3.12.7-r0	3.12.11-r0
Low	GHSA-c96f-x56v-gq3h	find-my-way@8.2.2	9.7.0
Low	GHSA-42h9-826w-cgv3	axios@1.7.4	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.7.4	1.18.0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@1.7.4	1.15.1
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@2.2.0	2.4.4
Low	ALPINE-CVE-2026-25210	expat@2.6.3-r0	2.7.4-r0
Low	GHSA-jp2q-39xq-3w4g	fast-xml-parser@4.4.1	4.5.5
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	GHSA-mmx7-hfxf-jppx	axios@1.7.4	1.18.0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r0	1.2.5-r3
Low	ALPINE-CVE-2025-66199	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	ALPINE-CVE-2026-22796	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-w9j2-pvgh-6h63	axios@1.7.4	1.15.1
Low	ALPINE-CVE-2026-34743	xz@5.6.2-r0	5.8.3-r0
Low	GHSA-2pr8-phx7-x9h3	protobufjs@7.4.0	7.5.6
Low	GHSA-f38q-mgvj-vph7	protobufjs@7.4.0	7.6.3
Low	GHSA-7q8q-rj6j-mhjq	axios@1.7.4	1.18.0
Low	GHSA-8pvw-jcv7-9cmj	@fastify/static@7.0.4	10.1.2
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@4.4.1	5.7.0
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GHSA-8988-4f7v-96qf	@opentelemetry/core@1.26.0	2.8.0
Low	GHSA-5c9x-8gcm-mpgx	axios@1.7.4	1.15.1
Low	GHSA-vf2m-468p-8v99	axios@1.7.4	1.15.1
Low	GHSA-w2qp-rph6-63g4	fastify@4.28.1	5.12.1
Low	GHSA-q6x5-8v7m-xcrf	@protobufjs/utf8@1.1.0	1.1.1
Low	GHSA-q6x5-8v7m-xcrf	protobufjs@7.4.0	7.5.6
Low	ALPINE-CVE-2025-4516	python3@3.12.7-r0	3.12.10-r1
Low	GHSA-445q-vr5w-6q77	axios@1.7.4	1.15.1
Low	ALPINE-CVE-2024-13176	openssl@3.3.2-r0	3.3.2-r2
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	GHSA-fx83-v9x8-x52w	protobufjs@7.4.0	7.5.6
Low	GHSA-jggg-4jg4-v7c6	protobufjs@7.4.0	7.5.8
Low	GHSA-48c2-rrv3-qjmp	yaml@2.2.2	2.8.3
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r1	1.3.2-r0

Used by

1 chart

Chart	Version	Tag	Containers
supabasetokens-studioVerified publisher	1.0.0	v1.12.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.