ghcr.io/appscode/gotenberg:8.25 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/appscode/gotenberg
ghcr.io/appscode/gotenberg:8.25 resolved to f9104080d9a7, scanned 14 Sept 2026: 3,358 findings, 7 critical, 9 on KEV; deployed by 1 chart, among them platform-api.
Radar Score
3,358 findings on digest f9104080d9a7 · scanned 14 Sept 2026
KEV ×9 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest f9104080d9a7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | DEBIAN-CVE-2026-11645KEV | chromium | 149.0.7827.102-1~deb13u1 |
| Critical | DEBIAN-CVE-2026-2441KEV | chromium | 145.0.7632.75-1~deb13u1 |
| Critical | DEBIAN-CVE-2026-3909KEV | chromium | 146.0.7680.80-1~deb13u1 |
| Critical | DEBIAN-CVE-2026-3910KEV | chromium | 146.0.7680.80-1~deb13u1 |
| Critical | DEBIAN-CVE-2026-5281KEV | chromium | 146.0.7680.177-1~deb13u1 |
| Critical | DEBIAN-CVE-2026-85046KEV | chromium | 152.0.7977.82-1~deb13u1 |
| Critical | DEBIAN-CVE-2026-87491KEV | chromium | no fix listed |
| High | DEBIAN-CVE-2018-10583 | libreoffice | no fix listed |
| High | DEBIAN-CVE-2025-15467 | openssl | 3.5.4-1~deb13u2 |
| High | DEBIAN-CVE-2026-0907 | chromium | 144.0.7559.59-1~deb13u1 |
| High | DSA-6135-1KEV | chromium | 145.0.7632.75-1~deb13u1 |
| High | DSA-6165-1KEV | chromium | 146.0.7680.80-1~deb13u1 |
| Medium | DEBIAN-CVE-2026-2315 | chromium | 145.0.7632.75-1~deb13u1 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | DEBIAN-CVE-2026-0628 | chromium | 143.0.7499.192-1~deb13u1 |
| Medium | DEBIAN-CVE-2018-6951 | patch | no fix listed |
| Medium | DEBIAN-CVE-2018-6952 | patch | no fix listed |
| Medium | DSA-6113-1 | openssl | 3.5.4-1~deb13u2 |
| Medium | DEBIAN-CVE-2019-1010022 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2017-2820 | poppler | no fix listed |
| Medium | DEBIAN-CVE-2026-2314 | chromium | 145.0.7632.75-1~deb13u1 |
| Medium | DEBIAN-CVE-2017-17740 | openldap | no fix listed |
| Medium | DEBIAN-CVE-2026-2313 | chromium | 145.0.7632.75-1~deb13u1 |
| Medium | DEBIAN-CVE-2014-8166 | cups | no fix listed |
| Medium | DEBIAN-CVE-2026-45447 | openssl | 3.5.6-1~deb13u2 |
| Medium | DEBIAN-CVE-2018-20796 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2026-55200 | libssh2 | 1.11.1-1+deb13u1 |
| Medium | DEBIAN-CVE-2017-16232 | tiff | no fix listed |
| Medium | DEBIAN-CVE-2019-9543 | poppler | no fix listed |
| Medium | DEBIAN-CVE-2015-3276 | openldap | no fix listed |
| Medium | DEBIAN-CVE-2025-14766 | chromium | 143.0.7499.169-1~deb13u1 |
| Medium | DEBIAN-CVE-2019-1010023 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2025-14765 | chromium | 143.0.7499.169-1~deb13u1 |
| Medium | DEBIAN-CVE-2017-2814 | poppler | no fix listed |
| Medium | DEBIAN-CVE-2018-16376 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2012-5639 | libreoffice | no fix listed |
| Medium | GHSA-5q7p-7jgv-ww56 | github.com/ | 8.31.0 |
| Medium | DEBIAN-CVE-2016-9580 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2017-2818 | poppler | no fix listed |
| Medium | DEBIAN-CVE-2016-9581 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9114 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9113 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2019-9545 | poppler | no fix listed |
| Medium | GHSA-jjwv-57xh-xr6r | github.com/ | 8.29.0 |
| Medium | DEBIAN-CVE-2026-19931 | curl | no fix listed |
| Medium | DEBIAN-CVE-2025-11187 | openssl | 3.5.4-1~deb13u2 |
| Medium | GHSA-4vmc-gm8v-m35h | github.com/ | 8.32.0 |
| Medium | DEBIAN-CVE-2019-9192 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2026-9079 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-42010 | gnutls28 | 3.8.9-3+deb13u4 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| platform-apiappscodeVerified publisher | 2026.9.11 | 8.25 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.