ghcr.io/data-fair/metrics:0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/data-fair/metrics

ghcr.io/data-fair/metrics:0 resolved to a8d40779eeae, scanned 14 Sept 2026: 222 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them data-fair.

Radar Score

3,3572863149

222 findings on digest a8d40779eeae · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0resolves to	a8d40779eeae	1 chart	8 days ago	2863149	3,357

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

222 distinct on this digest

Findings for digest a8d40779eeae as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2023-6237	openssl@3.1.1-r1	3.1.4-r4
Medium	ALPINE-CVE-2024-9143	openssl@3.1.1-r1	3.1.7-r1
Medium	ALPINE-CVE-2023-46218	curl@8.1.2-r0	8.5.0-r0
Medium	ALPINE-CVE-2023-3817	openssl@3.1.1-r1	3.1.2-r0
Medium	GHSA-w7jw-789q-3m8p	shell-quote@1.7.3	1.8.4
Medium	GHSA-f23m-r3pf-42rh	lodash@4.17.21	4.18.0
Medium	GHSA-xxjr-mmjv-4gpg	lodash@4.17.21	4.17.23
Medium	ALPINE-CVE-2025-0665	curl@8.1.2-r0	8.12.0-r0
Medium	GHSA-c7qv-q95q-8v27	http-proxy-middleware@1.3.1	2.0.7
Medium	ALPINE-CVE-2024-2379	curl@8.1.2-r0	8.7.1-r0
Medium	GHSA-67hx-6x53-jw92	@babel/traverse@7.16.3	7.23.2
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.7	0.1.13
Medium	GHSA-9wv6-86v2-598j	path-to-regexp@0.1.7	0.1.10
Medium	GHSA-qjx8-664m-686j	js-cookie@3.0.1	3.0.7
Medium	GHSA-cpq7-6gpm-g9rc	cipher-base@1.0.4	1.0.5
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	GHSA-p92q-9vqr-4j8v	axios@0.21.4	0.32.0
Medium	GHSA-pfrx-2q88-qq97	got@9.6.0	11.8.5
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.20.0	1.20.3
Medium	GHSA-3j8f-xvm3-ffx4	parse-path@4.0.3	5.0.0
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.5	7.5.11
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.1.2	3.1.3
Medium	GHSA-pf86-5x62-jrwf	axios@0.21.4	0.31.1
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-v62p-rq8g-8h59	pbkdf2@3.1.2	3.1.3
Low	ALPINE-CVE-2023-38546	curl@8.1.2-r0	8.4.0-r0
Low	GHSA-62hf-57xw-28j9	axios@0.21.4	0.31.1
Low	GHSA-h7cp-r72f-jxh6	pbkdf2@3.1.2	3.1.3
Low	GHSA-hhhv-q57g-882q	jose@2.0.5	2.0.7
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.11	7.5.7
Low	GHSA-q8qp-cvcw-x6jj	axios@1.4.0	1.15.2
Low	GHSA-3g43-6gmg-66jw	axios@0.21.4	0.31.1
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.15.1	1.15.6
Low	GHSA-ph9p-34f9-6g65	tmp@0.0.33	0.2.6
Low	GHSA-hfxv-24rg-xrqf	axios@0.21.4	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.21.4	0.32.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-f5x3-32g6-xq36	tar@6.1.11	6.2.1
Low	GHSA-6g55-p6wh-862q	postcss@7.0.39	8.5.12
Low	GHSA-pmwg-cvhr-8vh7	axios@0.21.4	0.31.1
Low	GHSA-qffp-2rhf-9h96	tar@6.1.11	7.5.10
Low	GHSA-23hp-3jrh-7fpw	tar@6.1.11	7.5.19
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.1	3.15.0
Low	GHSA-q6wq-5p59-983w	parse-url@6.0.0	6.0.1
Low	GHSA-jv3g-j58f-9mq9	jose@2.0.5	2.0.6
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	GHSA-7r86-cg39-jmmj	minimatch@3.1.2	3.1.3
Low	GHSA-c27g-q93r-2cwf	launch-editor@2.2.1	2.9.0
Low	GHSA-3jp5-5f8r-q2wg	vuetify@2.5.14	3.0.0-alpha.10

Used by

1 chart

Chart	Version	Tag	Containers
data-fairdata354-helmVerified publisher	1.1.2	0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.