ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/celestiaorg/celestia-node

ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha resolved to 4768ea1c5fd2, scanned 14 Sept 2026: 150 findings, 0 critical; deployed by 2 charts, among them celestia-local and celestia-node.

Radar Score

1,5020218130

150 findings on digest 4768ea1c5fd2 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v0.27.5-mocharesolves to	4768ea1c5fd2	2 charts	7 days ago	0218130	1,502

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

150 distinct on this digest

Findings for digest 4768ea1c5fd2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-4947	curl@8.12.1-r0	8.14.0-r0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.75.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.41.0	0.52.0
Low	ALPINE-CVE-2026-22796	openssl@3.3.1-r3	3.3.6-r0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.41.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.41.0	0.52.0
Low	ALPINE-CVE-2025-10148	curl@8.12.1-r0	8.14.1-r2
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.75.1	1.82.1
Low	GHSA-g6x7-jq8p-6q9q	github.com/quic-go/webtransport-go@v0.9.0	0.10.0
Low	GHSA-px4r-g4p3-hhqv	github.com/quic-go/webtransport-go@v0.9.0	0.10.0
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.1	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.88.1	1.97.3
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.41.0	0.52.0
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.14	0.5.15
Low	GHSA-vvgj-x9jq-8cj9	github.com/quic-go/quic-go@v0.54.0	0.59.1
Low	GHSA-2f2x-8mwp-p2gc	github.com/quic-go/webtransport-go@v0.9.0	0.10.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.37.0	1.40.0
Low	GHSA-34rh-wp3j-6cxc	github.com/pion/stun@v0.6.1	no fix listed
Low	GHSA-34rh-wp3j-6cxc	github.com/pion/stun/v3@v3.0.0	3.1.5
Low	GHSA-g754-hx8w-x2g6	github.com/quic-go/quic-go@v0.54.0	0.57.0
Low	GO-2026-4981	stdlib@go1.24.7	1.25.10
Low	GO-2026-4977	stdlib@go1.24.7	1.25.10
Low	GO-2026-4986	stdlib@go1.24.7	1.25.10
Low	GO-2026-4918	stdlib@go1.24.7	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.43.0	0.53.0
Low	GO-2026-4337	stdlib@go1.24.7	1.24.13
Low	GO-2026-4601	stdlib@go1.24.7	1.25.8
Low	GO-2026-5026	stdlib@go1.24.7	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.43.0	0.55.0
Low	GO-2026-4342	stdlib@go1.24.7	1.24.12
Low	ALPINE-CVE-2024-13176	openssl@3.3.1-r3	3.3.2-r2
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.75.1	1.82.2
Low	GO-2025-4116	golang.org/x/crypto@v0.41.0	0.43.0
Low	GO-2026-4870	stdlib@go1.24.7	1.25.9
Low	GO-2025-4009	stdlib@go1.24.7	1.24.8
Low	GO-2026-4947	stdlib@go1.24.7	1.25.9
Low	GO-2025-4006	stdlib@go1.24.7	1.24.8
Low	GO-2026-5037	stdlib@go1.24.7	1.25.11
Low	GO-2026-4971	stdlib@go1.24.7	1.25.10
Low	GHSA-378j-3jfj-8r9f	github.com/ipld/go-ipld-prime@v0.21.0	0.22.0
Low	GO-2026-5972	stdlib@go1.24.7	1.25.13
Low	GO-2026-6088	stdlib@go1.24.7	1.25.13
Low	GO-2026-6089	stdlib@go1.24.7	1.25.13
Low	GO-2026-6090	stdlib@go1.24.7	1.25.13
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r1	1.3.2-r0
Low	GO-2026-5038	stdlib@go1.24.7	1.25.11
Low	GO-2026-5942	golang.org/x/net@v0.43.0	0.56.0
Low	GO-2025-4012	stdlib@go1.24.7	1.24.8
Low	GO-2026-4440	golang.org/x/net@v0.43.0	0.45.0
Low	GO-2025-4011	stdlib@go1.24.7	1.24.8

Used by

2 charts

Chart	Version	Tag	Containers
celestia-localastria	9.0.0	v0.27.5-mocha	2
celestia-nodeastria	0.7.1	v0.27.5-mocha	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.