StackRadar

verdaccio/verdaccio:6.10.5 container image

Docker Hub

Scanned 6 Oct 2026

Deployed by 3 of 18,026 indexed charts (latest versions) at this tag.Docker Hub all tags of verdaccio/verdaccio

verdaccio/verdaccio:6.10.5 resolved to 560744912b64, scanned 6 Oct 2026: 30 findings, 0 critical; deployed by 3 charts, among them verdaccio, verdaccio and verdaccio.

Radar Score

32700030

30 findings on digest 560744912b64 · scanned 6 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
6.10.5resolves to560744912b643 charts2 days ago00030327

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

30 distinct on this digest

Findings for digest 560744912b64 as scanned on 6 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 6 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-vfj7-8cjw-p6xmbraces@3.0.3no fix listed
LowGHSA-mwp4-54f8-5fhrip-address@10.1.010.3.1
LowGHSA-rgw5-rvv9-x895brace-expansion@5.0.45.0.9
LowGHSA-23hp-3jrh-7fpwtar@7.5.117.5.19
LowGHSA-8x88-c5mf-7j5wtar@7.5.117.5.18
LowGHSA-mh99-v99m-4gvgbrace-expansion@5.0.45.0.8
LowGHSA-w4pp-8pjf-rmxwpacote@21.5.021.5.1
LowGHSA-vc2v-76pw-4v95compression@1.8.11.8.2
LowGHSA-ch52-4w7c-c8xphttp-cache-semantics@4.2.0no fix listed
LowGHSA-r292-9mhp-454mtar@7.5.117.5.21
LowGHSA-c2c7-rcm5-vvqjpicomatch@4.0.34.0.4
LowGHSA-f886-m6hf-6m8vbrace-expansion@5.0.45.0.5
LowGHSA-6j4f-fj2g-mc7pbrace-expansion@5.0.45.0.10
LowGHSA-qhr7-859c-m2p7brace-expansion@5.0.45.0.11
LowGHSA-jxxr-4gwj-5jf2brace-expansion@5.0.45.0.6
LowGHSA-rpw4-54j3-4h4qip-address@10.1.010.5.1
LowGHSA-w8wr-v893-vjvptar@7.5.117.5.18
LowGHSA-j6r3-76f7-8jcvip-address@10.1.010.7.1
LowGHSA-rj75-hqrm-r3gfpostcss-selector-parser@7.1.17.1.6
LowGHSA-52v5-jr5w-gjxrsigstore@4.1.04.1.1
LowGHSA-v2v4-37r5-5v8gip-address@10.1.010.1.1
LowGHSA-3v7f-55p6-f55ppicomatch@4.0.34.0.4
LowGHSA-gvwx-54wh-qm9jtar@7.5.117.5.17
LowGHSA-h3mg-xc3c-68pwip-address@10.1.010.7.1
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@5.0.45.0.7
LowGHSA-vmf3-w455-68vhtar@7.5.117.5.16
LowGHSA-w9m9-85wc-3x92postcss-selector-parser@7.1.17.1.3
LowGHSA-q2hr-2g5m-vwhrbrace-expansion@5.0.45.0.12
LowGHSA-xgjw-pm74-86q4@sigstore/verify@3.1.03.1.1
LowGHSA-jfc7-64v2-mr8c@sigstore/core@3.2.03.2.1

Used by

3 charts
ChartVersionTagContainers
verdaccioverdaccio4.35.26.10.51
verdacciowener4.35.26.10.51
verdacciowenerme4.35.26.10.51

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 6 Oct 2026 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.