supporttools/uptime-kuma:v2.6 container image

Docker Hub

Scanned 28 Sept 2026

Deployed by 1 of 17,926 indexed charts (latest versions) at this tag.Docker Hub all tags of supporttools/uptime-kuma

supporttools/uptime-kuma:v2.6 resolved to f8a49ed65809, scanned 28 Sept 2026: 375 findings, 0 critical; deployed by 1 chart, among them uptime-kuma.

Radar Score

4,3330475296

375 findings on digest f8a49ed65809 · scanned 28 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.6resolves to	f8a49ed65809	1 chart	today	0475296	4,333

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

375 distinct on this digest

Findings for digest f8a49ed65809 as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.60.0	1.82.2
Medium	GHSA-p92q-9vqr-4j8v	axios@0.28.1	0.32.0
Medium	GHSA-677m-j7p3-52f9	socket.io-parser@4.2.4	4.2.6
Medium	GHSA-jmr7-xgp7-cmfj	fast-xml-parser@4.2.5	4.5.4
Medium	GHSA-62hf-57xw-28j9	axios@0.28.1	0.31.1
Medium	GHSA-hfxv-24rg-xrqf	axios@0.28.1	0.32.0
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.60.0	1.83.1
Medium	GHSA-m7jm-9gc2-mpf2	fast-xml-parser@4.2.5	4.5.4
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.16.0	0.35.0
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.7	0.1.13
Medium	GHSA-9wv6-86v2-598j	path-to-regexp@0.1.7	0.1.10
Medium	GHSA-96hv-2xvq-fx4p	ws@8.16.0	8.21.0
Medium	GHSA-pf86-5x62-jrwf	axios@0.28.1	0.31.1
Medium	GHSA-5375-pq7m-f5r2	@grpc/grpc-js@1.7.3	1.9.16
Medium	GHSA-99f4-grh7-6pcq	@grpc/grpc-js@1.7.3	1.9.16
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.13.0	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.16.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.16.0	0.52.0
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	GHSA-w7pp-m8wf-vj6r	cryptography@2.6.1	39.0.1
Medium	GHSA-3g43-6gmg-66jw	axios@0.28.1	0.31.1
Medium	GHSA-wmfp-5q7x-987x	liquidjs@10.11.1	10.25.0
Medium	GHSA-3ppc-4f35-3m26	minimatch@9.0.4	9.0.6
Medium	PYSEC-2024-225	cryptography@2.6.1	42.0.4
Medium	GHSA-2x7j-588g-ccc2	nodemailer@6.9.13	9.1.0
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.20.2	1.20.3
Medium	PYSEC-2026-2132	click@7.0	8.3.3
Medium	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Medium	GHSA-5xp3-jfq3-5q8x	pip@18.1	21.1
Low	GHSA-66ff-xgx4-vchm	protobufjs@7.2.6	7.5.6
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-j5f8-grm9-p9fc	axios@0.28.1	0.32.0
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v3@v3.0.0	3.0.5
Low	GHSA-h75p-j8xm-m278	github.com/coredns/coredns@v1.10.0	1.14.2
Low	GHSA-527x-5wrf-22m2	github.com/coredns/coredns@v1.10.0	1.14.0
Low	GHSA-vp29-5652-4fw9	github.com/coredns/coredns@v1.10.0	1.14.3
Low	GHSA-ppxx-5m9h-6vxf	github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6	0.40.1
Low	GHSA-8gc5-j5rx-235r	fast-xml-parser@4.2.5	4.5.5
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	GHSA-86vw-mfpg-wwv9	jsonata@2.0.4	2.2.0
Low	GHSA-g357-x5c3-c72p	liquidjs@10.11.1	10.27.1
Low	GHSA-685m-2w69-288q	protobufjs@7.2.6	7.5.6
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	GHSA-hh27-hf48-9f5q	liquidjs@10.11.1	no fix listed
Low	GHSA-r7g9-xpmj-5fcq	liquidjs@10.11.1	10.26.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.6	1.16.0

Used by

1 chart

Chart	Version	Tag	Containers
uptime-kumasupporttools	2.6.0	v2.6	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.