ghcr.io/element-hq/matrix-authentication-service:0.14.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/element-hq/matrix-authentication-service

ghcr.io/element-hq/matrix-authentication-service:0.14.0 resolved to 834ea54370f0, scanned 14 Sept 2026: 118 findings, 0 critical; deployed by 1 chart, among them matrix-stack.

Radar Score

1,314012295

118 findings on digest 834ea54370f0 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.14.0resolves to	834ea54370f0	1 chart	8 days ago	012295	1,314

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

118 distinct on this digest

Findings for digest 834ea54370f0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-q49f-xg75-m9xw	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	GHSA-9c48-w39g-hm26	rsa@0.9.7	0.9.10
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GHSA-m758-wjhj-p3jq	wasmtime@27.0.0	36.0.7
Low	GHSA-pg9f-39pc-qf8g	crossbeam-channel@0.5.14	0.5.15
Low	DSA-6015-1	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Low	RUSTSEC-2023-0071	rsa@0.9.7	no fix listed
Low	DEBIAN-CVE-2026-42767	openssl@3.0.15-1~deb12u1	no fix listed
Low	RUSTSEC-2026-0020	wasmtime@27.0.0	24.0.6
Low	GHSA-9f94-5g5w-gf6r	aws-lc-sys@0.25.1	0.39.0
Low	DEBIAN-CVE-2026-63074	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-jxhv-7h78-9775	wasmtime@27.0.0	36.0.7
Low	GHSA-r6v5-fh4h-64xc	time@0.3.37	0.3.47
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u9	no fix listed
Low	GHSA-m9w2-8782-2946	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u9	2.36-9+deb12u10
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DEBIAN-CVE-2026-22796	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	RUSTSEC-2026-0269	wasmtime@27.0.0	24.0.13
Low	GHSA-w9wp-h8wv-79jx	opentelemetry_sdk@0.27.1	0.32.1
Low	DEBIAN-CVE-2025-27587	openssl@3.0.15-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GHSA-394w-hwhg-8vgm	wasmtime@27.0.0	36.0.7
Low	GHSA-f984-pcp8-v2p7	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2024-13176	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1
Low	GHSA-82j2-j2ch-gfr8	rustls-webpki@0.102.8	0.103.13
Low	GHSA-qqfj-4vcm-26hv	wasmtime@27.0.0	36.0.7
Low	DEBIAN-CVE-2026-45446	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	DEBIAN-CVE-2025-8058	glibc@2.36-9+deb12u9	2.36-9+deb12u13
Low	GHSA-rr8g-9fpq-6wmg	tokio@1.43.0	1.43.1
Low	DEBIAN-CVE-2026-22795	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-42770	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-89092	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-18374	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2025-68160	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	GHSA-7gcf-g7xr-8hxj	serde_with@3.12.0	3.21.0
Low	RUSTSEC-2025-0046	wasmtime@27.0.0	24.0.4
Low	GHSA-pwjx-qhcg-rvj4	rustls-webpki@0.102.8	0.103.10
Low	DEBIAN-CVE-2025-69418	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u9	no fix listed
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2025-0023	tokio@1.43.0	1.38.2
Low	RUSTSEC-2025-0052	async-std@1.13.0	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
matrix-stackrock8sVerified publisher	0.8.1	0.14.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.