ghcr.io/ctron/streamsheets-service-machines:2.4.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/ctron/streamsheets-service-machines

ghcr.io/ctron/streamsheets-service-machines:2.4.0 resolved to 0c5a3398d1e4, scanned 14 Sept 2026: 796 findings, 26 critical, 11 on KEV; deployed by 1 chart, among them streamsheets.

Radar Score

18,5242684385301

796 findings on digest 0c5a3398d1e4 · scanned 14 Sept 2026

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.4.0resolves to	0c5a3398d1e4	1 chart	7 days ago	2684385301	18,524

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

301 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 0c5a3398d1e4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.13	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.4.23	0.5.0
Low	RHSA-2025:10027	pam@1.3.1-14.el8	0:1.3.1-37.el8_10
Low	RHSA-2025:14557	pam@1.3.1-14.el8	0:1.3.1-38.el8_10
Low	GHSA-fvcv-3m26-pcqx	axios@0.21.1	0.31.0
Low	RHSA-2025:23383	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.9
Low	RHSA-2024:0119	libxml2@2.9.7-9.el8_4.2	0:2.9.7-18.el8_9
Low	RHSA-2022:7715	libxml2@2.9.7-9.el8_4.2	0:2.9.7-15.el8
Low	RHSA-2025:14135	libarchive@3.3.3-1.el8	0:3.3.3-6.el8_10
Low	GHSA-rcmh-qjqh-p98v	nodemailer@6.1.1	7.0.11
Low	RHSA-2022:2031	libssh@0.9.4-2.el8	0:0.9.6-3.el8
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-wh4c-j3r5-mjhp	xmldom@0.3.0	no fix listed
Low	RHSA-2025:4461	nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83	0:2021.06-4.module+el8.10.0+22904+d0fedeff
Low	RHSA-2025:4461	nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6	1:20.19.1-1.module+el8.10.0+23054+5431297f
Low	GHSA-qpx9-hpmf-5gmw	underscore@1.4.4	1.13.8
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	RHSA-2026:28553	vim@2:8.0.1763-15.el8	2:8.0.1763-24.el8_10
Low	RHSA-2026:2128	python3@3.6.8-37.el8	0:3.6.8-73.el8_10
Low	RHSA-2026:5221	python3@3.6.8-37.el8	0:3.6.8-39.el8_4.9
Low	RHSA-2021:4172	qt5@5.12.5-3.el8	0:5.15.2-1.el8
Low	RHSA-2026:22721	expat@2.2.5-4.el8	0:2.5.0-2.el8_10
Low	RHSA-2025:4051	gnutls@3.6.14-8.el8_3	0:3.6.16-8.el8_10.3
Low	RHSA-2025:8686	glibc@2.28-151.el8	0:2.28-251.el8_10.22
Low	RHSA-2023:5252	dmidecode@1:3.2-8.el8	1:3.3-4.el8_8.1
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.13	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@3.0.2	5.0.2
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.13.2	1.15.4
Low	GHSA-rv95-896h-c2vc	express@4.17.1	4.19.2
Low	GHSA-mm7p-fcc7-pg87	nodemailer@6.1.1	7.0.7
Low	RHSA-2024:3203	systemd@239-45.el8_4.1	0:239-82.el8
Low	RHSA-2025:12450	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.2
Low	RHSA-2021:4455	python-pip@9.0.3-19.el8	0:9.0.3-20.el8
Low	RHSA-2025:4049	libtasn1@4.13-3.el8	0:4.13-5.el8_10
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.2	6.14.0
Low	RHSA-2026:57462	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.13
Low	RHSA-2024:10779	python3@3.6.8-37.el8	0:3.6.8-69.el8_10
Low	GHSA-6chq-wfr3-2hj9	axios@0.21.1	0.31.1
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@4.4.13	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.0	3.15.2
Low	GHSA-4jrm-c32x-w4jf	convict@5.0.0	6.2.4
Low	GHSA-r292-9mhp-454m	tar@4.4.13	7.5.21
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.13.2	1.16.0
Low	RHSA-2024:3347	python3@3.6.8-37.el8	0:3.6.8-62.el8_10
Low	GHSA-r28c-9q8g-f849	postcss@7.0.32	8.5.18
Low	RHSA-2022:7482	qt5@5.12.5-3.el8	0:5.15.3-1.el8
Low	RHSA-2024:3233	libssh@0.9.4-2.el8	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.4-2.el8	0:0.9.6-17.el8_10
Low	GHSA-wf5p-g6vw-rhxx	axios@0.21.1	0.28.0

Used by

1 chart

Chart	Version	Tag	Containers
streamsheetshelm-chartsVerified publisher	0.2.3	2.4.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.