ghcr.io/cosmo-tech/cosmotech-copilot-api:latest container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/cosmo-tech/cosmotech-copilot-api
ghcr.io/cosmo-tech/cosmotech-copilot-api:latest resolved to a2be95de450c, scanned 14 Sept 2026: 1,050 findings, 1 critical; deployed by 1 chart, among them cosmotech-copilot-api.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
1,050 distinct on this digest
Findings for digest a2be95de450c as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2021-31879 | wget | no fix listed |
| Low | DEBIAN-CVE-2026-60002 | openssh | no fix listed |
| Low | DEBIAN-CVE-2026-42960 | unbound | 1.22.0-2+deb13u3 |
| Low | DEBIAN-CVE-2026-18408 | postgresql-17 | 17.11-0+deb13u1 |
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | DEBIAN-CVE-2026-11972 | python3.13 | 3.13.5-2+deb13u5 |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-5342 | libraw | 0.21.4-2+deb13u1 |
| Low | GHSA-mgf9-4vpg-hj56 | tornado | 6.5.6 |
| Low | GHSA-6mq8-rvhq-8wgg | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2026-33901 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u8 |
| Low | DEBIAN-CVE-2026-80230 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-15741 | postgresql-17 | 17.11-0+deb13u1 |
| Low | DEBIAN-CVE-2026-34545 | openexr | no fix listed |
| Low | GHSA-c98p-7wgm-6p64 | tornado | 6.5.3 |
| Low | DEBIAN-CVE-2026-42013 | gnutls28 | 3.8.9-3+deb13u4 |
| Low | PYSEC-2026-3951 | gitpython | 3.1.55 |
| Low | DEBIAN-CVE-2017-13716 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-0861 | glibc | 2.41-12+deb13u2 |
| Low | DEBIAN-CVE-2026-25794 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u6 |
| Low | DEBIAN-CVE-2026-58469 | wget | no fix listed |
| Low | DEBIAN-CVE-2017-7275 | imagemagick | no fix listed |
| Low | DEBIAN-CVE-2026-3833 | gnutls28 | 3.8.9-3+deb13u4 |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | DEBIAN-CVE-2026-34588 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-31789 | openssl | 3.5.5-1~deb13u2 |
| Low | GHSA-jhmp-mqwm-3gq8 | tornado | 6.5.3 |
| Low | GHSA-pjwx-r37v-7724 | langchain-core | 0.3.85 |
| Low | DEBIAN-CVE-2026-54874 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2026-6475 | postgresql-17 | 17.10-0+deb13u1 |
| Low | DEBIAN-CVE-2026-42766 | openssl | 3.5.6-1~deb13u2 |
| Low | DEBIAN-CVE-2026-74860 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-66035 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2026-33908 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u8 |
| Low | DEBIAN-CVE-2026-34501 | apr-util | 1.6.3-3+deb13u1 |
| Low | DEBIAN-CVE-2026-34502 | apr-util | 1.6.3-3+deb13u1 |
| Low | DEBIAN-CVE-2018-9996 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GHSA-63hw-fmq6-xxg2 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2025-69650 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-25985 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u6 |
| Low | GHSA-gmj6-6f8f-6699 | jinja2 | 3.1.5 |
| Low | DEBIAN-CVE-2026-47247 | libheif | 1.19.8-1+deb13u1 |
| Low | DEBIAN-CVE-2021-32256 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.46-1~deb13u2 |
| Low | DEBIAN-CVE-2026-34543 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-63075 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2026-3644 | python3.13 | 3.13.5-2+deb13u2 |
| Low | GHSA-xcgm-r5h9-7989 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2025-1178 | binutils | no fix listed |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.