StackRadar

tzahi12345/youtubedl-material:4.2 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of tzahi12345/youtubedl-material

tzahi12345/youtubedl-material:4.2 resolved to 3720b856bd2f, scanned 14 Sept 2026: 201 findings, 3 critical; deployed by 1 chart, among them youtubedl-material.

Radar Score

4,4103189486

201 findings on digest 3720b856bd2f · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
4.2resolves to3720b856bd2f1 chart8 days ago31894864,410

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

94 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 3720b856bd2f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumALPINE-CVE-2022-25235expat@2.2.9-r12.2.10-r2
MediumALPINE-CVE-2022-22822expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-25315expat@2.2.9-r12.2.10-r2
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-r628-mhmh-qjhwtar@4.4.134.4.15
MediumALPINE-CVE-2022-23852expat@2.2.9-r12.2.10-r1
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-cph5-m8f7-6c5xaxios@0.21.10.21.2
MediumALPINE-CVE-2021-20231gnutls@3.6.15-r03.6.15-r1
MediumALPINE-CVE-2021-22918nodejs@12.20.1-r012.22.2-r0
MediumALPINE-CVE-2021-44531nodejs@12.20.1-r012.22.10-r0
MediumGHSA-9c47-m6qq-7p4hjson5@2.1.22.2.2
MediumALPINE-CVE-2021-20232gnutls@3.6.15-r03.6.15-r1
MediumALPINE-CVE-2022-22823expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-22824expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2021-45960expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-27404freetype@2.10.4-r02.10.4-r1
MediumALPINE-CVE-2022-28391busybox@1.31.1-r191.31.1-r22
MediumGHSA-8hfj-j24r-96c4moment@2.29.12.29.2
MediumGHSA-wc69-rhjr-hc9gmoment@2.29.12.29.4
MediumALPINE-CVE-2021-39537ncurses@6.2_p20200523-r06.2_p20200523-r1
MediumALPINE-CVE-2021-22939nodejs@12.20.1-r012.22.5-r0
MediumALPINE-CVE-2021-37701nodejs@12.20.1-r012.22.6-r0
MediumGHSA-vx3p-948g-6vhqssri@6.0.16.0.2
MediumALPINE-CVE-2021-36159apk-tools@2.10.5-r12.10.7-r0
MediumALPINE-CVE-2022-25314expat@2.2.9-r12.2.10-r2
MediumGHSA-ww39-953v-wcq6glob-parent@5.1.15.1.2
MediumALPINE-CVE-2022-22826expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-22827expat@2.2.9-r12.2.10-r0
MediumGHSA-9r2w-394v-53qctar@4.4.134.4.16
MediumALPINE-CVE-2021-46143expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-22825expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-23990expat@2.2.9-r12.2.10-r1
MediumGHSA-fwr7-v2mv-hh25async@2.6.32.6.4
MediumALPINE-CVE-2021-43618gmp@6.2.0-r06.2.1-r1
MediumALPINE-CVE-2021-44532nodejs@12.20.1-r012.22.10-r0
MediumALPINE-CVE-2021-23841openssl@1.1.1i-r01.1.1j-r0
MediumGHSA-93q8-gq69-wqmwansi-regex@4.1.04.1.1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.22.5.4
MediumGHSA-wm7h-9275-46v2dicer@0.2.5no fix listed
MediumGHSA-qqgx-2p2h-9c37ini@1.3.51.3.6
MediumALPINE-CVE-2022-27406freetype@2.10.4-r02.10.4-r2
MediumALPINE-CVE-2021-44533nodejs@12.20.1-r012.22.10-r0
MediumGHSA-74fj-2j2h-c42qfollow-redirects@1.13.11.14.7
MediumGHSA-ff7x-qrg7-qggmdot-prop@4.2.04.2.1
MediumALPINE-CVE-2022-27405freetype@2.10.4-r02.10.4-r2
MediumALPINE-CVE-2021-37712nodejs@12.20.1-r012.22.6-r0
MediumGHSA-c2qf-rxjj-qqgwsemver@5.7.15.7.2

Used by

1 chart
ChartVersionTagContainers
youtubedl-materialgeek-cookbookVerified publisher4.4.24.21

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.