ghcr.io/conductionnl/user-component-php:latest container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/conductionnl/user-component-php

ghcr.io/conductionnl/user-component-php:latest resolved to 198db44fabb5, scanned 14 Sept 2026: 429 findings, 4 critical, 2 on KEV; deployed by 1 chart, among them user-component.

Radar Score

6,078416106303

429 findings on digest 198db44fabb5 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	198db44fabb5	1 chart	8 days ago	416106303	6,078

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

303 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 198db44fabb5 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2023-27535	curl@7.80.0-r0	8.0.1-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v0.1.1	1.2.8
Low	ALPINE-CVE-2022-27774	curl@7.80.0-r0	7.80.0-r1
Low	ALPINE-CVE-2023-27536	curl@7.80.0-r0	8.0.1-r0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0
Low	ALPINE-CVE-2023-38546	curl@7.80.0-r0	8.4.0-r0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0
Low	GO-2021-0142	stdlib@go1.13.10	1.13.15
Low	GO-2021-0263	stdlib@go1.13.10	1.16.10
Low	GO-2023-1571	stdlib@go1.13.10	1.19.6
Low	GHSA-vr2x-7687-h6qv	api-platform/core@v2.6.6	2.7.10
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.27.0	1.83.1
Low	GHSA-cg23-qf8f-62rr	symfony/security-http@v5.4.0	5.4.47
Low	GO-2022-0435	stdlib@go1.13.10	1.17.9
Low	GHSA-99pg-grm5-qq3v	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	20.10.9
Low	GHSA-6hwg-w5jg-9c6x	github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce	19.03.9
Low	GHSA-428q-q3vv-3fq3	api-platform/core@v2.6.6	3.4.17
Low	GO-2022-0288	stdlib@go1.13.10	1.16.12
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20211209124913-491a49abca63
Low	GHSA-qq5c-677p-737q	symfony/process@v5.4.0	5.4.46
Low	GHSA-6h46-9jf5-q59x	symfony/security-http@v5.4.0	5.4.53
Low	ALPINE-CVE-2022-48303	tar@1.34-r0	1.34-r1
Low	GO-2023-2102	stdlib@go1.13.10	1.20.10
Low	GHSA-ph86-p8f6-f9r2	symfony/security-http@v5.4.0	5.4.52
Low	GHSA-529h-vh3j-85hq	twig/twig@v3.3.8	3.27.0
Low	ALPINE-CVE-2023-23915	curl@7.80.0-r0	7.80.0-r6
Low	GO-2022-0236	stdlib@go1.13.10	1.15.12
Low	ALPINE-CVE-2023-0465	openssl@1.1.1n-r0	1.1.1t-r2
Low	GO-2021-0226	stdlib@go1.13.10	1.14.8
Low	GHSA-4qpc-3hr4-r2p4	symfony/yaml@v5.3.11	5.4.52
Low	GHSA-9frc-8383-795m	symfony/yaml@v5.3.11	5.4.52
Low	GO-2021-0240	stdlib@go1.13.10	1.15.13
Low	ALPINE-CVE-2023-5868	postgresql14@14.2-r0	14.10-r0
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v0.1.1	1.2.8
Low	ALPINE-CVE-2023-5870	postgresql14@14.2-r0	14.10-r0
Low	GO-2021-0242	stdlib@go1.13.10	1.15.13
Low	ALPINE-CVE-2022-29187	git@2.34.1-r0	2.34.4-r0
Low	ALPINE-CVE-2022-39253	git@2.34.1-r0	2.34.5-r0
Low	GO-2021-0264	stdlib@go1.13.10	1.16.10
Low	GO-2022-0969	stdlib@go1.13.10	1.18.6
Low	ALPINE-CVE-2023-27538	curl@7.80.0-r0	8.0.1-r0
Low	GHSA-c2p3-7m5p-cv8x	symfony/yaml@v5.3.11	5.4.52
Low	GO-2021-0239	stdlib@go1.13.10	1.15.13
Low	GHSA-68jq-c3rv-pcrr	webonyx/graphql-php@v0.13.9	15.31.5
Low	GO-2021-0347	stdlib@go1.13.10	1.16.15
Low	GO-2021-0245	stdlib@go1.13.10	1.15.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0
Low	GHSA-c72p-9xmj-rx3w	github.com/containerd/containerd@v1.3.2	1.4.8
Low	GO-2021-0319	stdlib@go1.13.10	1.16.14
Low	GHSA-3gv2-29qc-v67m	symfony/security-bundle@v5.4.0	5.4.20

Used by

1 chart

Chart	Version	Tag	Containers
user-componentuser-component	1.2.0	latest	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.