StackRadar

ghcr.io/devops-ia/steampipe:v2.4.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/devops-ia/steampipe

ghcr.io/devops-ia/steampipe:v2.4.1 resolved to a982103d91d3, scanned 14 Sept 2026: 308 findings, 0 critical; deployed by 1 chart, among them steampipe.

Radar Score

3,1240043265

308 findings on digest a982103d91d3 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.4.1resolves toa982103d91d31 chart6 days ago00432653,124

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

265 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest a982103d91d3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-33948jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowGO-2026-5037stdlib@go1.26.11.25.11
LowDEBIAN-CVE-2026-40225systemd@252.39-1~deb12u1252.39-1~deb12u2
LowGO-2026-4971stdlib@go1.26.11.25.10
LowGO-2026-5972stdlib@go1.26.11.25.13
LowGO-2026-6088stdlib@go1.26.11.25.13
LowGO-2026-6089stdlib@go1.26.11.25.13
LowGO-2026-6090stdlib@go1.26.11.25.13
LowDEBIAN-CVE-2026-27171zlib@1:1.2.13.dfsg-1no fix listed
LowDEBIAN-CVE-2017-14159openldap@2.5.13+dfsg-5no fix listed
LowGO-2026-5038stdlib@go1.26.11.25.11
LowDEBIAN-CVE-2017-18018coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2026-13757p11-kit@0.24.1-2no fix listed
LowGO-2026-5942stdlib@go1.26.11.26.6
LowGO-2026-5942golang.org/x/net@v0.48.00.56.0
LowDEBIAN-CVE-2025-9403jq@1.6-2.1+deb12u1no fix listed
LowDEBIAN-CVE-2026-11850krb5@1.20.1-2+deb12u4no fix listed
LowGO-2026-6218stdlib@go1.26.11.25.13
LowDEBIAN-CVE-2026-56392coreutils@9.1-1no fix listed
LowGHSA-vh4v-2xq2-g5cgoras.land/oras-go/v2@v2.5.02.6.1
LowDEBIAN-CVE-2026-54370acl@2.3.1-3no fix listed
LowDEBIAN-CVE-2005-2541tar@1.34+dfsg-1.2+deb12u1no fix listed
LowDEBIAN-CVE-2025-10966curl@7.88.1-10+deb12u14no fix listed
LowGHSA-7jxh-36q5-gcqvgithub.com/containerd/containerd@v1.7.291.7.35
LowDEBIAN-CVE-2026-15534perl@5.36.0-7+deb12u3no fix listed
LowGO-2026-5970golang.org/x/text@v0.33.00.39.0
LowDEBIAN-CVE-2026-56391coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2025-14017curl@7.88.1-10+deb12u14no fix listed
LowDEBIAN-CVE-2024-10041pam@1.5.2-6+deb12u2no fix listed
LowGHSA-w5pp-99ch-qj29github.com/go-git/go-git/v5@v5.17.15.19.1
LowGHSA-3xc5-wrhm-f963github.com/go-git/go-git/v5@v5.17.15.18.0
LowDEBIAN-CVE-2026-40612jq@1.6-2.1+deb12u1no fix listed
LowDEBIAN-CVE-2026-44777jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2026-41256jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2026-43894jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2026-43896jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowDEBIAN-CVE-2026-18938p11-kit@0.24.1-2no fix listed
LowDEBIAN-CVE-2026-13595util-linux@2.38.1-5+deb12u3no fix listed
LowGO-2026-4976stdlib@go1.26.11.25.10
LowDEBIAN-CVE-2025-5278coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2026-47770jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowGO-2026-5856stdlib@go1.26.11.25.12
LowGO-2026-6355golang.org/x/crypto@v0.47.00.56.0
LowGO-2026-4980stdlib@go1.26.11.25.10
LowDEBIAN-CVE-2026-42770openssl@3.0.19-1~deb12u23.0.20-1~deb12u2
LowGO-2026-5039stdlib@go1.26.11.25.11
LowDEBIAN-CVE-2026-41257jq@1.6-2.1+deb12u11.6-2.1+deb12u2
LowGO-2026-4946stdlib@go1.26.11.25.9
LowGO-2026-5064github.com/containerd/containerd@v1.7.29no fix listed
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.55.6no fix listed

Used by

1 chart
ChartVersionTagContainers
steampipehelm-steampipeVerified publisher2.4.1v2.4.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.