ghcr.io/data-fair/metrics:0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/data-fair/metrics

ghcr.io/data-fair/metrics:0 resolved to a8d40779eeae, scanned 14 Sept 2026: 222 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them data-fair.

Radar Score

3,3572863149

222 findings on digest a8d40779eeae · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0resolves to	a8d40779eeae	1 chart	8 days ago	2863149	3,357

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

222 distinct on this digest

Findings for digest a8d40779eeae as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2023-38545	curl@8.1.2-r0	8.4.0-r0
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.53.0-r0	1.57.0-r0
High	ALPINE-CVE-2024-6119	openssl@3.1.1-r1	3.1.7-r0
High	ALPINE-CVE-2023-38039	curl@8.1.2-r0	8.3.0-r0
High	ALPINE-CVE-2024-2398	curl@8.1.2-r0	8.7.1-r0
High	GHSA-r5fr-rjxr-66jc	lodash.template@4.5.0	4.18.0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	ALPINE-CVE-2024-2511	openssl@3.1.1-r1	3.1.4-r6
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-35jh-r3h4-6jhm	lodash.template@4.5.0	no fix listed
Medium	ALPINE-CVE-2024-7264	curl@8.1.2-r0	8.9.1-r0
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.5	no fix listed
Medium	GHSA-xvch-5gv4-984h	minimist@1.2.5	1.2.6
Medium	ALPINE-CVE-2024-5535	openssl@3.1.1-r1	3.1.6-r0
Medium	GHSA-9c47-m6qq-7p4h	json5@2.2.0	2.2.2
Medium	ALPINE-CVE-2022-48174	busybox@1.36.1-r0	1.36.1-r1
Medium	GHSA-76p3-8jx3-jpfq	loader-utils@2.0.2	2.0.3
Medium	ALPINE-CVE-2024-6197	curl@8.1.2-r0	8.9.0-r0
Medium	GHSA-7f3x-x4pr-wqhj	parse-url@6.0.0	6.0.1
Medium	GHSA-fjxv-7rqg-78g4	form-data@4.0.0	4.0.4
Medium	ALPINE-CVE-2023-5363	openssl@3.1.1-r1	3.1.4-r0
Medium	GHSA-4wf5-vphf-c2xc	terser@4.8.0	4.8.1
Medium	ALPINE-CVE-2024-4741	openssl@3.1.1-r1	3.1.6-r0
Medium	GHSA-c2qf-rxjj-qqgw	semver@7.3.5	7.5.2
Medium	GHSA-43fc-jf86-j433	axios@0.21.4	0.30.3
Medium	GHSA-r683-j2x4-v87g	node-fetch@2.6.6	2.6.7
Medium	ALPINE-CVE-2023-3446	openssl@3.1.1-r1	3.1.1-r3
Medium	GHSA-hhq3-ff78-jv3g	loader-utils@2.0.2	2.0.4
Medium	GHSA-j9fq-vwqv-2fm2	parse-url@6.0.0	8.1.0
Medium	GHSA-3rfm-jhwj-7488	loader-utils@2.0.2	2.0.4
Medium	GHSA-rp65-9cf3-cjxr	nth-check@1.0.2	2.0.1
Medium	GHSA-f8q6-p94x-37v3	minimatch@3.0.4	3.0.5
Medium	GHSA-fhg7-m89q-25r3	ua-parser-js@0.7.31	0.7.33
Medium	GHSA-rc47-6667-2j5j	http-cache-semantics@4.1.0	4.1.1
Medium	GHSA-35jp-ww65-95wh	axios@1.4.0	1.16.0
Medium	ALPINE-CVE-2023-5678	openssl@3.1.1-r1	3.1.4-r1
Medium	ALPINE-CVE-2023-6129	openssl@3.1.1-r1	3.1.4-r3
Medium	GHSA-grv7-fg5c-xmjg	braces@3.0.2	3.0.3
Medium	GHSA-3h5v-q93c-6h6q	ws@7.5.5	7.5.10
Medium	GHSA-pjwm-pj3p-43mv	axios@0.21.4	0.32.0
Medium	ALPINE-CVE-2024-9681	curl@8.1.2-r0	8.11.0-r0
Medium	ALPINE-CVE-2024-0727	openssl@3.1.1-r1	3.1.4-r5
Medium	GHSA-jr5f-v2jv-69x6	axios@0.21.4	0.30.0
Medium	GHSA-95m3-7q98-8xr5	sha.js@2.4.11	2.4.12
Medium	GHSA-8hc4-vh64-cxmj	axios@1.4.0	1.7.4
Medium	GHSA-wr3j-pwj9-hqq6	webpack-dev-middleware@4.3.0	5.3.4
Medium	GHSA-4p35-cfcx-8653	parse-url@6.0.0	6.0.1
Medium	ALPINE-CVE-2025-0725	curl@8.1.2-r0	8.12.0-r0
Medium	GHSA-pfq8-rq6v-vf5m	html-minifier@4.0.0	no fix listed
Medium	GHSA-4hjh-wcwx-xvwj	axios@1.4.0	1.12.0

Used by

1 chart

Chart	Version	Tag	Containers
data-fairdata354-helmVerified publisher	1.1.2	0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.