ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/external-secrets/kubernetes-external-secrets
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0 resolved to eab9bd0b6986, scanned 14 Sept 2026: 154 findings, 1 critical; deployed by 1 chart, among them kubernetes-external-secrets.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest eab9bd0b6986 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-rhx6-c78j-4q9w | path-to-regexp | 0.1.12 |
| Low | GHSA-hj48-42vr-x3v9 | path-parse | 1.0.7 |
| Low | GHSA-cfm4-qjh2-4765 | node-forge | 1.3.0 |
| Low | GHSA-hhhv-q57g-882q | jose | 2.0.7 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GHSA-554w-wpv2-vw27 | node-forge | 1.3.2 |
| Low | GHSA-685m-2w69-288q | protobufjs | 7.5.6 |
| Low | GHSA-75px-5xx7-5xc7 | protobufjs | 7.5.6 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | GHSA-5375-pq7m-f5r2 | @grpc/ | 1.9.16 |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | GHSA-j8xg-fqg3-53r7 | word-wrap | 1.2.4 |
| Low | GHSA-5m6q-g25r-mvwx | node-forge | 1.4.0 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | GHSA-58f5-hfqc-jgch | jose | 1.28.1 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | GHSA-jv3g-j58f-9mq9 | jose | 1.28.2 |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-776f-qx25-q3cc | xml2js | 0.5.0 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-ppp5-5v6c-4jwp | node-forge | 1.4.0 |
| Low | GHSA-qpx9-hpmf-5gmw | underscore | 1.13.8 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-wcpc-wj8m-hjx6 | protobufjs | 7.6.1 |
| Low | GHSA-8fr3-hfg3-gpgp | node-forge | 1.0.0 |
| Low | GHSA-66ff-xgx4-vchm | protobufjs | 7.5.6 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-rv95-896h-c2vc | express | 4.19.2 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-jvwf-75h9-cwgg | protobufjs | 7.5.6 |
| Low | GHSA-4rq4-32rv-6wp6 | shelljs | 0.8.5 |
| Low | ALPINE-CVE-2021-23839 | openssl | 1.1.1j-r0 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | GHSA-gxpj-cx7g-858c | debug | 4.3.1 |
| Low | GHSA-2328-f5f3-gj25 | node-forge | 1.4.0 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-m5vv-6r4h-3vj9 | @azure/ | 4.2.1 |
| Low | GHSA-mpwj-fcr6-x34c | yarn | 1.22.13 |
| Low | GHSA-2r2c-g63r-vccr | node-forge | 1.3.0 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 1.1.13 |
| Low | ALPINE-CVE-2020-28928 | musl | 1.1.24-r3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| kubernetes-external-secretstrozz | 6.3.0 | 6.3.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.