ghcr.io/curium-rocks/mitre-siphon:main container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/curium-rocks/mitre-siphon
ghcr.io/curium-rocks/mitre-siphon:main resolved to 503c00321502, scanned 14 Sept 2026: 168 findings, 3 critical, 2 on KEV; deployed by 1 chart, among them mitre-siphon.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
168 distinct on this digest
Findings for digest 503c00321502 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | ALPINE-CVE-2024-13176 | openssl | 3.1.8-r0 |
| Low | GHSA-xpw8-rcwv-8f8p | netty-codec-http2 | 4.1.100.Final |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.5.19 |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 10.1.55 |
| Low | GHSA-4wp7-92pw-q264 | spring-context | no fix listed |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
| Low | GHSA-p47f-322f-whfh | logback-core | 1.5.33 |
| Low | GHSA-6v67-2wr5-gvf4 | logback-core | 1.5.13 |
| Low | GHSA-6hcq-hmm3-jj3c | spring-webflux | no fix listed |
| Low | GHSA-6hcq-hmm3-jj3c | spring-webmvc | no fix listed |
| Low | GHSA-qqpg-mvqg-649v | logback-core | 1.5.25 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| mitre-siphonmitre-siphon | 0.2.9 | main | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.