ghcr.io/bluesky-social/pds:0.4 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/bluesky-social/pds

ghcr.io/bluesky-social/pds:0.4 resolved to d95725b24dbe, scanned 14 Sept 2026: 84 findings, 0 critical; deployed by 1 chart, among them bluesky-pds.

Radar Score

83800975

84 findings on digest d95725b24dbe · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.4resolves to	d95725b24dbe	1 chart	7 days ago	00975	838

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

75 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest d95725b24dbe as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vxpw-j846-p89q	undici@6.26.0	6.27.0
Low	GHSA-45rx-2jwx-cxfr	@opentelemetry/propagator-jaeger@2.8.0	2.9.0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.41.0	0.52.0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.6	5.0.9
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.15	7.5.19
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-rcmh-qjqh-p98v	nodemailer@6.10.1	7.0.11
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.6	5.0.8
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.15	7.5.18
Low	GHSA-mm7p-fcc7-pg87	nodemailer@6.10.1	7.0.7
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-r292-9mhp-454m	tar@7.5.15	7.5.21
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-w8wr-v893-vjvp	tar@7.5.15	7.5.18
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-p6gq-j5cr-w38f	nodemailer@6.10.1	9.0.1
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@6.10.1	8.0.5
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.41.0	0.45.0
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.7.5	0.7.7
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.41.0	0.45.0
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.15	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@5.0.6	5.0.7
Low	GHSA-p88m-4jfj-68fv	undici@6.26.0	6.27.0
Low	GHSA-vmf3-w455-68vh	tar@7.5.15	7.5.16
Low	GHSA-5v7r-6r5c-r473	file-type@16.5.4	21.3.1
Low	GO-2026-5026	stdlib@go1.25.10	1.25.13
Low	GHSA-2x7j-588g-ccc2	nodemailer@6.10.1	9.1.0
Low	GO-2025-4116	golang.org/x/crypto@v0.41.0	0.43.0
Low	GHSA-4mjr-xmp4-gh2g	qs@6.15.3	6.16.0
Low	GO-2026-5037	stdlib@go1.25.10	1.25.11
Low	GHSA-378j-3jfj-8r9f	github.com/ipld/go-ipld-prime@v0.21.0	0.22.0
Low	GO-2026-5972	stdlib@go1.25.10	1.25.13
Low	GO-2026-6088	stdlib@go1.25.10	1.25.13
Low	GO-2026-6089	stdlib@go1.25.10	1.25.13
Low	GO-2026-6090	stdlib@go1.25.10	1.25.13
Low	GO-2026-5038	stdlib@go1.25.10	1.25.11
Low	GHSA-r7g4-qg5f-qqm2	nodemailer@6.10.1	8.0.8

Used by

1 chart

Chart	Version	Tag	Containers
bluesky-pdsijmacd	1.0.0	0.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.