ghcr.io/appscode/gotenberg:8.25 container image
GitHub Container RegistryScanned 19 Sept 2026
Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/appscode/gotenberg
ghcr.io/appscode/gotenberg:8.25 resolved to f9104080d9a7, scanned 19 Sept 2026: 3,423 findings, 7 critical, 9 on KEV; deployed by 1 chart, among them platform-api.
Radar Score
3,423 findings on digest f9104080d9a7 · scanned 19 Sept 2026
KEV ×9 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest f9104080d9a7 as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-2322 | chromium | 145.0.7632.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-11269 | chromium | 149.0.7827.53-1~deb13u1 |
| Low | DEBIAN-CVE-2026-87507 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-87482 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-78966 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-34990 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-11150 | chromium | 149.0.7827.53-1~deb13u1 |
| Low | DEBIAN-CVE-2026-11273 | chromium | 149.0.7827.53-1~deb13u1 |
| Low | DEBIAN-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-32777 | expat | 2.8.2-1~deb13u1 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-7955 | chromium | 148.0.7778.96-1~deb13u1 |
| Low | DEBIAN-CVE-2026-16768 | gdk-pixbuf | no fix listed |
| Low | DEBIAN-CVE-2026-91714 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-91725 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-87635 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-5896 | chromium | 147.0.7727.55-1~deb13u1 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | DEBIAN-CVE-2026-87496 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-11238 | chromium | 149.0.7827.53-1~deb13u1 |
| Low | DEBIAN-CVE-2026-11098 | chromium | 149.0.7827.53-1~deb13u1 |
| Low | DEBIAN-CVE-2026-13977 | chromium | 150.0.7871.46-1~deb13u1 |
| Low | DEBIAN-CVE-2026-17689 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-91744 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-14131 | chromium | 150.0.7871.46-1~deb13u1 |
| Low | DEBIAN-CVE-2026-14132 | chromium | 150.0.7871.46-1~deb13u1 |
| Low | DEBIAN-CVE-2026-14135 | chromium | 150.0.7871.46-1~deb13u1 |
| Low | DEBIAN-CVE-2026-14150 | chromium | 150.0.7871.46-1~deb13u1 |
| Low | DEBIAN-CVE-2026-16415 | chromium | 150.0.7871.181-1~deb13u1 |
| Low | DEBIAN-CVE-2026-8010 | chromium | 148.0.7778.96-1~deb13u1 |
| Low | DEBIAN-CVE-2026-11850 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2026-87484 | chromium | 153.0.8010.47-2~deb13u1 |
| Low | DEBIAN-CVE-2026-56132 | expat | 2.8.2-1~deb13u1 |
| Low | DEBIAN-CVE-2026-12015 | chromium | 149.0.7827.114-1~deb13u1 |
| Low | DEBIAN-CVE-2026-12025 | chromium | 149.0.7827.114-1~deb13u1 |
| Low | DEBIAN-CVE-2026-6767 | nss | 2:3.110-1+deb13u2 |
| Low | DEBIAN-CVE-2025-66382 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-34933 | avahi | no fix listed |
| Low | DEBIAN-CVE-2026-11666 | chromium | 149.0.7827.102-1~deb13u1 |
| Low | DEBIAN-CVE-2026-15146 | wget | no fix listed |
| Low | DEBIAN-CVE-2026-17866 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-15588 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | DEBIAN-CVE-2026-11205 | chromium | 149.0.7827.53-1~deb13u1 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| platform-apiappscodeVerified publisher | 2026.9.11 | 8.25 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.