ghcr.io/curium-rocks/mitre-siphon:main container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/curium-rocks/mitre-siphon

ghcr.io/curium-rocks/mitre-siphon:main resolved to 503c00321502, scanned 14 Sept 2026: 168 findings, 3 critical, 2 on KEV; deployed by 1 chart, among them mitre-siphon.

Radar Score

3,0833116490

168 findings on digest 503c00321502 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
mainresolves to	503c00321502	1 chart	7 days ago	3116490	3,083

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

168 distinct on this digest

Findings for digest 503c00321502 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-v682-8vv8-vpwr	tomcat-embed-websocket@10.1.8	10.1.19
Medium	GHSA-m2cm-222f-qw44	mchange-commons-java@0.2.15	0.4.0
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.4	2.14.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.92.Final	4.1.135.Final
Medium	ALPINE-CVE-2024-0727	openssl@3.1.1-r1	3.1.4-r5
Medium	GHSA-v94h-hvhg-mf9h	spring-webmvc@6.0.9	6.0.14
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@10.1.8	10.1.58
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.14.3	2.18.8
Medium	ALPINE-CVE-2023-6237	openssl@3.1.1-r1	3.1.4-r4
Medium	GHSA-mppv-79ch-vw6q	tomcat-embed-core@10.1.8	10.1.9
Medium	GHSA-xjhv-p3fv-x24r	reactor-netty-http@1.1.7	1.1.13
Medium	ALPINE-CVE-2024-9143	openssl@3.1.1-r1	3.1.7-r1
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.14.3	2.18.8
Medium	ALPINE-CVE-2023-3817	openssl@3.1.1-r1	3.1.2-r0
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@10.1.8	10.1.58
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.92.Final	4.1.124.Final
Medium	GHSA-55g7-9cwv-5qfv	snappy-java@1.1.8.4	1.1.10.4
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.14.3	2.15.0
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.92.Final	4.1.133.Final
Medium	GHSA-r936-gwx5-v52f	spring-webmvc@6.0.9	no fix listed
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.92.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.92.Final	4.1.133.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.92.Final	4.1.136.Final
Medium	GHSA-q24v-hpg3-v3jp	reactor-netty-core@1.1.7	1.1.13
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.92.Final	4.1.135.Final
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@10.1.8	10.1.55
Medium	GHSA-pqr6-cmr2-h8hf	snappy-java@1.1.8.4	1.1.10.1
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.3.2	3.7.1
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.10.7	no fix listed
Low	GHSA-vmq6-5m68-f53m	logback-core@1.4.7	1.4.12
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.4.7	1.4.12
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@10.1.8	10.1.14
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.92.Final	4.1.133.Final
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.8.4	1.1.10.1
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.3.2	3.9.2
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.92.Final	4.1.132.Final
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.92.Final	4.1.133.Final
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.92.Final	4.1.137.Final
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@10.1.8	10.1.55
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@10.1.8	10.1.42
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@10.1.8	10.1.52
Low	GHSA-mgp5-rv84-w37q	tomcat-embed-core@10.1.8	10.1.52
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.92.Final	4.1.135.Final
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.92.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.19.0	2.25.5
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.92.Final	4.1.125.Final
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@10.1.8	10.1.55
Low	GHSA-jmp9-x22r-554x	spring-core@6.0.9	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.92.Final	4.1.133.Final
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@10.1.8	10.1.54

Used by

1 chart

Chart	Version	Tag	Containers
mitre-siphonmitre-siphon	0.2.9	main	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.