ghcr.io/external-secrets/external-secrets:v2.13.0 container image

GitHub Container Registry

Scanned 21 Oct 2026

Deployed by 3 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/external-secrets/external-secrets

ghcr.io/external-secrets/external-secrets:v2.13.0 resolved to f799d87a6a95, scanned 21 Oct 2026: 8 findings, 0 critical; deployed by 3 charts, among them external-secrets, external-secrets and external-secrets.

Radar Score

400008

8 findings on digest f799d87a6a95 · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.13.0resolves to	f799d87a6a95	3 charts	4 days ago	0008	40

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8 distinct on this digest

Findings for digest f799d87a6a95 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.17.6	1.17.7
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.27.0	0.29.0
Low	GO-2026-5932	golang.org/x/crypto@v0.58.0	no fix listed
Low	GO-2026-6809	stdlib@go1.27.2	1.26.10
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0	1.45.0

Used by

3 charts

Chart	Version	Tag	Containers
external-secretsexternal-secrets-operatorVerified publisher	2.13.0	v2.13.0	3
external-secretswener	2.13.0	v2.13.0	3
external-secretswenerme	2.13.0	v2.13.0	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.