ghcr.io/ethpandaops/syncoor:master container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/ethpandaops/syncoor

ghcr.io/ethpandaops/syncoor:master resolved to 233aa9808fc7, scanned 14 Sept 2026: 107 findings, 0 critical; deployed by 1 chart, among them syncoor-server.

Radar Score

952001097

107 findings on digest 233aa9808fc7 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
masterresolves to	233aa9808fc7	1 chart	7 days ago	001097	952

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

97 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 233aa9808fc7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2026-6090	stdlib@go1.26.5	1.25.13
Low	GO-2026-5038	stdlib@go1.26.0	1.25.11
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2026-5942	stdlib@go1.26.5	1.26.6
Low	GO-2026-6218	stdlib@go1.26.5	1.25.13
Low	GHSA-7jxh-36q5-gcqv	github.com/containerd/containerd/v2@v2.2.4	2.2.8
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-6222	golang.org/x/image@v0.41.0	0.45.0
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43894	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43896	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4976	stdlib@go1.26.0	1.25.10
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	ALPINE-CVE-2026-47770	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5856	stdlib@go1.26.0	1.25.12
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-4980	stdlib@go1.26.0	1.25.10
Low	GO-2026-5039	stdlib@go1.26.0	1.25.11
Low	ALPINE-CVE-2026-41257	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4946	stdlib@go1.26.0	1.25.9
Low	GO-2026-4600	stdlib@go1.26.0	1.26.1
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.44.334	no fix listed
Low	GO-2026-5066	golang.org/x/image@v0.41.0	0.43.0
Low	GO-2026-4866	stdlib@go1.26.0	1.26.2
Low	GO-2026-4961	golang.org/x/image@v0.41.0	0.42.0
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	GO-2026-4603	stdlib@go1.26.0	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-4982	stdlib@go1.26.0	1.25.10
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	GO-2026-4864	stdlib@go1.26.0	1.25.9
Low	GO-2026-4865	stdlib@go1.26.0	1.25.9
Low	GO-2026-4869	stdlib@go1.26.0	1.25.9
Low	ALPINE-CVE-2026-54679	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4970	stdlib@go1.26.0	1.25.12
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.44.334	no fix listed
Low	ALPINE-CVE-2026-43895	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4602	stdlib@go1.26.0	1.25.8
Low	GHSA-crc3-h8v6-qh57	github.com/cli/cli/v2@v2.67.0	2.92.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.5	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.52.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GHSA-72x6-4j93-7w86	github.com/moby/buildkit@v0.29.0	0.31.1
Low	GHSA-q7pp-wcgr-pffx	github.com/disintegration/imaging@v1.6.2	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
syncoor-serverethereum-helm-chartsVerified publisher	0.0.1	master	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.