ghcr.io/element-hq/matrix-authentication-service:0.14.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/element-hq/matrix-authentication-service

ghcr.io/element-hq/matrix-authentication-service:0.14.0 resolved to 834ea54370f0, scanned 14 Sept 2026: 118 findings, 0 critical; deployed by 1 chart, among them matrix-stack.

Radar Score

1,314012295

118 findings on digest 834ea54370f0 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.14.0resolves to	834ea54370f0	1 chart	8 days ago	012295	1,314

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

95 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 834ea54370f0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-69420	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	GHSA-6xvm-j4wr-6v98	quinn-proto@0.11.9	0.11.14
Low	GHSA-hfpc-8r3f-gw53	aws-lc-sys@0.25.1	0.38.0
Low	GHSA-vw5v-4f2q-w9xf	aws-lc-sys@0.25.1	0.38.0
Low	DEBIAN-CVE-2026-9076	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	GHSA-2gh3-rmm4-6rq5	protobuf@2.28.0	3.7.2
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u9	2.36-9+deb12u11
Low	DEBIAN-CVE-2026-63072	openssl@3.0.15-1~deb12u1	no fix listed
Low	GHSA-4w2j-m93h-cj5j	quinn-proto@0.11.9	0.11.15
Low	DEBIAN-CVE-2026-45445	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	GHSA-4pj9-g833-qx53	lettre@0.11.12	0.11.22
Low	RUSTSEC-2026-0096	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-31789	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Low	DEBIAN-CVE-2025-69419	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	GHSA-65p9-r9h6-22vj	aws-lc-sys@0.25.1	0.38.0
Low	DEBIAN-CVE-2026-54874	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42766	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	GHSA-xx5w-cvp6-jv83	wasmtime@27.0.0	36.0.7
Low	GHSA-hx6p-xpx3-jvvv	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GHSA-434x-w66g-qw3r	bytes@1.10.0	1.11.1
Low	DEBIAN-CVE-2026-75803	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-243v-98vx-264h	wasmtime@27.0.0	36.0.6
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-q49f-xg75-m9xw	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	GHSA-9c48-w39g-hm26	rsa@0.9.7	0.9.10
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GHSA-m758-wjhj-p3jq	wasmtime@27.0.0	36.0.7
Low	GHSA-pg9f-39pc-qf8g	crossbeam-channel@0.5.14	0.5.15
Low	DSA-6015-1	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Low	RUSTSEC-2023-0071	rsa@0.9.7	no fix listed
Low	DEBIAN-CVE-2026-42767	openssl@3.0.15-1~deb12u1	no fix listed
Low	RUSTSEC-2026-0020	wasmtime@27.0.0	24.0.6
Low	GHSA-9f94-5g5w-gf6r	aws-lc-sys@0.25.1	0.39.0
Low	DEBIAN-CVE-2026-63074	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-jxhv-7h78-9775	wasmtime@27.0.0	36.0.7
Low	GHSA-r6v5-fh4h-64xc	time@0.3.37	0.3.47
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-m9w2-8782-2946	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u9	2.36-9+deb12u10
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DEBIAN-CVE-2026-22796	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	RUSTSEC-2026-0269	wasmtime@27.0.0	24.0.13
Low	GHSA-w9wp-h8wv-79jx	opentelemetry_sdk@0.27.1	0.32.1

Used by

1 chart

Chart	Version	Tag	Containers
matrix-stackrock8sVerified publisher	0.8.1	0.14.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.