ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/external-secrets/kubernetes-external-secrets

ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0 resolved to eab9bd0b6986, scanned 14 Sept 2026: 154 findings, 1 critical; deployed by 1 chart, among them kubernetes-external-secrets.

Radar Score

2,8381125685

154 findings on digest eab9bd0b6986 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
6.3.0resolves to	eab9bd0b6986	1 chart	7 days ago	1125685	2,838

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

154 distinct on this digest

Findings for digest eab9bd0b6986 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2021-3711	openssl@1.1.1g-r0	1.1.1l-r0
High	GHSA-c4w7-xm78-47vh	y18n@4.0.0	4.0.1
High	ALPINE-CVE-2021-23840	openssl@1.1.1g-r0	1.1.1j-r0
High	ALPINE-CVE-2021-3712	openssl@1.1.1g-r0	1.1.1l-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.11-r4
High	ALPINE-CVE-2021-3449	openssl@1.1.1g-r0	1.1.1k-r0
High	GHSA-4c7m-wxvm-r7gc	netmask@1.0.6	1.1.0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.19	4.18.0
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-hw8r-x6gr-5gjp	jsonpath-plus@0.19.0	10.3.0
High	GHSA-pppg-cpfq-h7wr	jsonpath-plus@0.19.0	10.2.0
High	GHSA-3jfq-g458-7qm9	tar@4.4.13	4.4.14
High	GHSA-35jh-r3h4-6jhm	lodash@4.17.19	4.17.21
Medium	GHSA-hrpp-h998-j3pp	qs@6.9.3	6.9.7
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.5	no fix listed
Medium	GHSA-xvch-5gv4-984h	minimist@1.2.5	1.2.6
Medium	GHSA-r628-mhmh-qjhw	tar@4.4.13	4.4.15
Medium	GHSA-cf4h-3jhx-xvhq	underscore@1.10.2	1.12.1
Medium	GHSA-896r-f27r-55mw	json-schema@0.2.3	0.4.0
Medium	GHSA-pch5-whg9-qr2r	netmask@1.0.6	2.0.1
Medium	GHSA-vx3p-948g-6vhq	ssri@6.0.1	6.0.2
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.5-r0	2.10.7-r0
Medium	GHSA-9r2w-394v-53qc	tar@4.4.13	4.4.16
Medium	GHSA-h755-8qp9-cq85	protobufjs@6.10.2	6.11.4
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1g-r0	1.1.1j-r0
Medium	GHSA-9j49-mfvp-vmhm	pac-resolver@4.1.0	5.0.0
Medium	GHSA-9j49-mfvp-vmhm	degenerator@2.2.0	3.0.1
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@4.1.0	4.1.1
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.5.1	2.5.4
Medium	GHSA-pw54-mh39-w3hc	npm-user-validate@1.0.0	1.0.1
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1g-r0	1.1.1i-r0
Medium	GHSA-qqgx-2p2h-9c37	ini@1.3.5	1.3.6
Medium	GHSA-c2qf-rxjj-qqgw	semver@5.7.1	5.7.2
Medium	ALPINE-CVE-2021-42380	busybox@1.31.1-r9	1.31.1-r11
Medium	GHSA-r683-j2x4-v87g	node-fetch@2.6.1	2.6.7
Medium	GHSA-29mw-wpgm-hmr9	lodash@4.17.19	4.17.21
Medium	ALPINE-CVE-2021-42379	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42381	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42385	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42378	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42382	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42384	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42386	busybox@1.31.1-r9	1.31.1-r11
Medium	GHSA-qq89-hq3f-393p	tar@4.4.13	4.4.18
Medium	GHSA-g954-5hwp-pp24	protobufjs@6.10.2	6.10.3
Medium	ALPINE-CVE-2021-42383	busybox@1.31.1-r9	1.31.1-r11
Medium	GHSA-rrc9-gqf8-8rwg	aws-sdk@2.628.0	2.814.0
Medium	GHSA-f8q6-p94x-37v3	minimatch@3.0.4	3.0.5
Medium	GHSA-xq3m-2v4x-88gg	protobufjs@6.10.2	7.5.5
Medium	GHSA-px4h-xg32-q955	normalize-url@4.5.0	4.5.1

Used by

1 chart

Chart	Version	Tag	Containers
kubernetes-external-secretstrozz	6.3.0	6.3.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.