tzahi12345/youtubedl-material:4.2 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of tzahi12345/youtubedl-material
tzahi12345/youtubedl-material:4.2 resolved to 3720b856bd2f, scanned 14 Sept 2026: 201 findings, 3 critical; deployed by 1 chart, among them youtubedl-material.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
201 distinct on this digest
Findings for digest 3720b856bd2f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2022-22826 | expat | 2.2.10-r0 |
| Medium | ALPINE-CVE-2022-22827 | expat | 2.2.10-r0 |
| Medium | GHSA-9r2w-394v-53qc | tar | 4.4.16 |
| Medium | ALPINE-CVE-2021-46143 | expat | 2.2.10-r0 |
| Medium | ALPINE-CVE-2022-22825 | expat | 2.2.10-r0 |
| Medium | ALPINE-CVE-2022-23990 | expat | 2.2.10-r1 |
| Medium | GHSA-fwr7-v2mv-hh25 | async | 2.6.4 |
| Medium | ALPINE-CVE-2021-43618 | gmp | 6.2.1-r1 |
| Medium | ALPINE-CVE-2021-44532 | nodejs | 12.22.10-r0 |
| Medium | ALPINE-CVE-2021-23841 | openssl | 1.1.1j-r0 |
| Medium | GHSA-93q8-gq69-wqmw | ansi-regex | 4.1.1 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 2.5.4 |
| Medium | GHSA-wm7h-9275-46v2 | dicer | no fix listed |
| Medium | GHSA-qqgx-2p2h-9c37 | ini | 1.3.6 |
| Medium | ALPINE-CVE-2022-27406 | freetype | 2.10.4-r2 |
| Medium | ALPINE-CVE-2021-44533 | nodejs | 12.22.10-r0 |
| Medium | GHSA-74fj-2j2h-c42q | follow-redirects | 1.14.7 |
| Medium | GHSA-ff7x-qrg7-qggm | dot-prop | 4.2.1 |
| Medium | ALPINE-CVE-2022-27405 | freetype | 2.10.4-r2 |
| Medium | ALPINE-CVE-2021-37712 | nodejs | 12.22.6-r0 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | GHSA-43fc-jf86-j433 | axios | 0.30.3 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-3580 | nettle | 3.5.1-r2 |
| Medium | GHSA-r683-j2x4-v87g | node-fetch | 2.6.7 |
| Medium | GHSA-29mw-wpgm-hmr9 | lodash | 4.17.21 |
| Medium | ALPINE-CVE-2021-42379 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42381 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42385 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42378 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42382 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42384 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42386 | busybox | 1.31.1-r21 |
| Medium | GHSA-qq89-hq3f-393p | tar | 4.4.18 |
| Medium | ALPINE-CVE-2022-25313 | expat | 2.2.10-r2 |
| Medium | ALPINE-CVE-2021-22959 | nodejs | 12.22.10-r0 |
| Medium | ALPINE-CVE-2021-42383 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-37713 | nodejs | 12.22.6-r0 |
| Medium | GHSA-f8q6-p94x-37v3 | minimatch | 3.0.5 |
| Medium | GHSA-72xf-g2v4-qvf3 | tough-cookie | 4.1.3 |
| Medium | GHSA-5955-9wpr-37jh | tar | 4.4.18 |
| Medium | GHSA-rc47-6667-2j5j | http-cache-semantics | 4.1.1 |
| Medium | ALPINE-CVE-2021-22960 | nodejs | 12.22.10-r0 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-pp7h-53gx-mx7r | bl | 4.0.3 |
| Medium | GHSA-pjwm-pj3p-43mv | axios | 0.32.0 |
| Medium | GHSA-43f8-2h32-f4cj | hosted-git-info | 2.8.9 |
| Medium | GHSA-jr5f-v2jv-69x6 | axios | 0.30.0 |
| Medium | GHSA-5528-5vmv-3xc2 | multer | 2.1.1 |
| Medium | GHSA-257v-vj4p-3w2h | color-string | 1.5.5 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| youtubedl-materialgeek-cookbookVerified publisher | 4.4.2 | 4.2 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.