StackRadar

ghcr.io/damap-org/damap-backend:5.0.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/damap-org/damap-backend

ghcr.io/damap-org/damap-backend:5.0.0 resolved to f3d0c7d35498, scanned 14 Sept 2026: 248 findings, 0 critical; deployed by 1 chart, among them damap-chart.

Radar Score

2,5470041207

248 findings on digest f3d0c7d35498 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
5.0.0resolves tof3d0c7d354981 chartyesterday00412072,547

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

41 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest f3d0c7d35498 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2026-45447openssl@3.0.13-0ubuntu3.93.0.13-0ubuntu3.11
MediumGHSA-98qh-xjc8-98pqpostgresql@42.7.342.7.11
MediumUBUNTU-CVE-2026-19931curl@8.5.0-2ubuntu10.9no fix listed
MediumUBUNTU-CVE-2016-20013glibc@2.39-0ubuntu8.7no fix listed
MediumGHSA-4g8c-wm8x-jfhwnetty-handler@4.1.108.Final4.1.118.Final
MediumUBUNTU-CVE-2026-10536curl@8.5.0-2ubuntu10.98.5.0-2ubuntu10.11
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.108.Final4.1.132.Final
MediumUBUNTU-CVE-2026-18924curl@8.5.0-2ubuntu10.9no fix listed
MediumUBUNTU-CVE-2026-11856curl@8.5.0-2ubuntu10.98.5.0-2ubuntu10.12
MediumUBUNTU-CVE-2026-8925curl@8.5.0-2ubuntu10.98.5.0-2ubuntu10.10
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.14.03.18.0
MediumUBUNTU-CVE-2026-42009gnutls28@3.8.3-1.1ubuntu3.53.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2026-63076openssl@3.0.13-0ubuntu3.93.0.13-0ubuntu3.15
MediumUBUNTU-CVE-2025-59375expat@2.6.1-2ubuntu0.4no fix listed
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.108.Final4.1.135.Final
MediumUBUNTU-CVE-2026-33846gnutls28@3.8.3-1.1ubuntu3.53.8.3-1.1ubuntu3.6
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.17.12.18.8
MediumUBUNTU-CVE-2026-5450glibc@2.39-0ubuntu8.72.39-0ubuntu8.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.17.12.18.8
MediumUBUNTU-CVE-2026-34182openssl@3.0.13-0ubuntu3.93.0.13-0ubuntu3.11
MediumGHSA-phg3-gv66-q38xquarkus-rest@3.11.13.15.3.1
MediumGHSA-phg3-gv66-q38xquarkus-rest-deployment@3.11.13.15.3.1
MediumGHSA-prj3-ccx8-p6x4netty-codec-http2@4.1.108.Final4.1.124.Final
MediumUBUNTU-CVE-2026-34180openssl@3.0.13-0ubuntu3.93.0.13-0ubuntu3.11
MediumUBUNTU-CVE-2026-7383openssl@3.0.13-0ubuntu3.93.0.13-0ubuntu3.11
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.108.Final4.1.133.Final
MediumGHSA-gfh6-3pqw-x2j4smallrye-fault-tolerance-core@6.3.06.4.2
MediumUBUNTU-CVE-2026-8924curl@8.5.0-2ubuntu10.98.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2025-69720ncurses@6.4+20240113-1ubuntu26.4+20240113-1ubuntu2.1
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.108.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.108.Final4.1.133.Final
MediumUBUNTU-CVE-2026-8376perl@5.38.2-3.2ubuntu0.25.38.2-3.2ubuntu0.3
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.108.Final4.1.136.Final
MediumGHSA-q6cq-mhr2-jmr5netty-codec-haproxy@4.1.108.Final4.1.136.Final
MediumUBUNTU-CVE-2026-5260gnutls28@3.8.3-1.1ubuntu3.53.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2026-8927curl@8.5.0-2ubuntu10.98.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2026-42010gnutls28@3.8.3-1.1ubuntu3.53.8.3-1.1ubuntu3.6
MediumGHSA-hf6x-8p5f-cgmfhttpcore5@5.0.25.4.3
MediumGHSA-v3jc-474w-2wm6httpcore5-h2@5.0.25.4.3
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.108.Final4.1.135.Final
MediumUBUNTU-CVE-2026-33845gnutls28@3.8.3-1.1ubuntu3.53.8.3-1.1ubuntu3.6

Used by

1 chart
ChartVersionTagContainers
damap-chartdamapVerified publisher0.3.05.0.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.