StackRadar

ghcr.io/beluga-cloud/actual/actualserver:23.12.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/beluga-cloud/actual/actualserver

ghcr.io/beluga-cloud/actual/actualserver:23.12.1 resolved to c8a0d5ec5a12, scanned 14 Sept 2026: 101 findings, 0 critical; deployed by 1 chart, among them actual.

Radar Score

1,262012278

101 findings on digest c8a0d5ec5a12 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
23.12.1resolves toc8a0d5ec5a121 chart8 days ago0122781,262

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

101 distinct on this digest

Findings for digest c8a0d5ec5a12 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighALPINE-CVE-2024-6119openssl@3.1.4-r63.1.7-r0
MediumGHSA-2p57-rm9w-gvfpip@2.0.0no fix listed
MediumALPINE-CVE-2024-5535openssl@3.1.4-r63.1.6-r0
MediumGHSA-fjxv-7rqg-78g4form-data@4.0.04.0.4
MediumALPINE-CVE-2024-4741openssl@3.1.4-r63.1.6-r0
MediumGHSA-c2qf-rxjj-qqgwsemver@7.3.57.5.2
MediumGHSA-43fc-jf86-j433axios@1.6.11.13.5
MediumGHSA-pq67-2wwv-3xjxtar-fs@2.1.12.1.2
MediumGHSA-35jp-ww65-95whaxios@1.6.11.16.0
MediumALPINE-CVE-2025-9230openssl@3.1.4-r63.1.8-r1
MediumGHSA-jr5f-v2jv-69x6axios@1.6.11.8.2
MediumGHSA-8hc4-vh64-cxmjaxios@1.6.11.7.4
MediumGHSA-4hjh-wcwx-xvwjaxios@1.6.11.12.0
MediumALPINE-CVE-2024-9143openssl@3.1.4-r63.1.7-r1
MediumALPINE-CVE-2025-9232openssl@3.1.4-r63.1.8-r1
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-8cj5-5rvv-wf4vtar-fs@2.1.12.1.3
MediumGHSA-p92q-9vqr-4j8vaxios@1.6.11.16.0
MediumGHSA-vj76-c3g6-qr5vtar-fs@2.1.12.1.4
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.20.11.20.3
MediumGHSA-3ppc-4f35-3m26minimatch@3.1.23.1.3
MediumGHSA-pf86-5x62-jrwfaxios@1.6.11.15.1
LowGHSA-rhx6-c78j-4q9wpath-to-regexp@0.1.70.1.12
LowGHSA-62hf-57xw-28j9axios@1.6.11.15.1
LowGHSA-34x7-hfp2-rc4vtar@6.1.137.5.7
LowALPINE-CVE-2024-22020nodejs@20.12.1-r020.15.1-r0
LowGHSA-q8qp-cvcw-x6jjaxios@1.6.11.15.2
LowGHSA-3g43-6gmg-66jwaxios@1.6.11.15.2
LowGHSA-cxjh-pqwp-8mfpfollow-redirects@1.15.21.15.6
LowGHSA-hfxv-24rg-xrqfaxios@1.6.11.16.0
LowGHSA-j5f8-grm9-p9fcaxios@1.6.11.16.0
LowGHSA-rgw5-rvv9-x895brace-expansion@1.1.111.1.18
LowGHSA-f5x3-32g6-xq36tar@6.1.136.2.1
LowGHSA-pmwg-cvhr-8vh7axios@1.6.11.15.1
LowGHSA-qffp-2rhf-9h96tar@6.1.137.5.10
LowGHSA-23hp-3jrh-7fpwtar@6.1.137.5.19
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.04.0.6
LowGHSA-7r86-cg39-jmmjminimatch@3.1.23.1.3
LowGHSA-8qq5-rm4j-mr97tar@6.1.137.5.3
LowGHSA-fvcv-3m26-pcqxaxios@1.6.11.15.0
LowGHSA-23c5-xmqv-rm74minimatch@3.1.23.1.4
LowGHSA-mh99-v99m-4gvgbrace-expansion@1.1.111.1.17
LowGHSA-8x88-c5mf-7j5wtar@6.1.137.5.18
LowGHSA-jchw-25xp-jwwcfollow-redirects@1.15.21.15.4
LowGHSA-rv95-896h-c2vcexpress@4.18.24.19.2
LowALPINE-CVE-2024-4603openssl@3.1.4-r63.1.5-r0
LowGHSA-6chq-wfr3-2hj9axios@1.6.11.15.1
LowGHSA-r6q2-hw4h-h46wtar@6.1.137.5.4
LowGHSA-3w6x-2g7m-8v23axios@1.6.11.15.2

Used by

1 chart
ChartVersionTagContainers
actualbeluga-cloudVerified publisher2.0.023.12.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.