ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/celestiaorg/celestia-node
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha resolved to 4768ea1c5fd2, scanned 14 Sept 2026: 150 findings, 0 critical; deployed by 2 charts, among them celestia-local and celestia-node.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 4768ea1c5fd2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2025-69420 | openssl | 3.3.6-r0 |
| Low | GHSA-mh2q-q3fh-2475 | go.opentelemetry.io/ | 1.41.0 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-78h2-9frx-2jm8 | github.com/ | 4.1.4 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-mr7q-c9w9-wh4h | github.com/ | 1.16.8 |
| Low | GHSA-92mm-2pjq-r785 | github.com/ | 1.8.6 |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.3.7-r0 |
| Low | ALPINE-CVE-2025-69419 | openssl | 3.3.6-r0 |
| Low | GHSA-mq3p-rrmp-79jg | github.com/ | 1.16.8 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | GHSA-47m2-4cr7-mhcw | github.com/ | 0.54.1 |
| Low | GHSA-689v-6xwf-5jf3 | github.com/ | 1.17.0 |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.3.6-r0 |
| Low | GHSA-m6j8-rg6r-7mv8 | github.com/ | 1.16.9 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-wg4g-wm44-ch5j | github.com/ | 3.1.4 |
| Low | GHSA-9f3f-wv7r-qc8r | github.com/ | 3.0.11 |
| Low | GHSA-9f3f-wv7r-qc8r | github.com/ | no fix listed |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.5-r1 |
| Low | GHSA-hfvc-g4fc-pqhx | go.opentelemetry.io/ | 1.43.0 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | GHSA-fw7p-63qq-7hpr | filippo.io/ | 1.1.1 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r3 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | ALPINE-CVE-2025-4947 | curl | 8.14.0-r0 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | ALPINE-CVE-2025-10148 | curl | 8.14.1-r2 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | GHSA-g6x7-jq8p-6q9q | github.com/ | 0.10.0 |
| Low | GHSA-px4r-g4p3-hhqv | github.com/ | 0.10.0 |
| Low | GHSA-xmrv-pmrh-hhx2 | github.com/ | 1.97.3 |
| Low | GHSA-xmrv-pmrh-hhx2 | github.com/ | 1.7.8 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GHSA-jc7w-c686-c4v9 | github.com/ | 0.5.15 |
| Low | GHSA-vvgj-x9jq-8cj9 | github.com/ | 0.59.1 |
| Low | GHSA-2f2x-8mwp-p2gc | github.com/ | 0.10.0 |
| Low | GHSA-9h8m-3fm2-qjrq | go.opentelemetry.io/ | 1.40.0 |
| Low | GHSA-34rh-wp3j-6cxc | github.com/ | 3.1.5 |
| Low | GHSA-34rh-wp3j-6cxc | github.com/ | no fix listed |
| Low | GHSA-g754-hx8w-x2g6 | github.com/ | 0.57.0 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| celestia-localastria | 9.0.0 | v0.27.5-mocha | 2 |
| celestia-nodeastria | 0.7.1 | v0.27.5-mocha | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.