ghcr.io/facebook/threatexchange/hma:1.0.17 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/facebook/threatexchange/hma

ghcr.io/facebook/threatexchange/hma:1.0.17 resolved to 84d09c6b75a7, scanned 14 Sept 2026: 95 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them hasher-matcher-actioner.

Radar Score

91001787

95 findings on digest 84d09c6b75a7 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.0.17resolves to	84d09c6b75a7	1 chart	yesterday	01787	910

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

95 distinct on this digest

Findings for digest 84d09c6b75a7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DLA-4412-1	glib2.0@2.66.8-1+deb11u5	2.66.8-1+deb11u7
Low	DLA-4455-1	python3.9@3.9.2-1+deb11u3	3.9.2-1+deb11u5
Low	DLA-4315-1	tiff@4.2.0-1+deb11u6	4.2.0-1+deb11u7
Low	DLA-4259-1	systemd@247.3-7+deb11u6	247.3-7+deb11u7
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.4.0	2.7.0
Low	DLA-4339-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u7
Low	DLA-4273-1	postgresql-13@13.20-0+deb11u1	13.22-0+deb11u1
Low	DLA-4159-1	postgresql-13@13.20-0+deb11u1	13.21-0+deb11u1
Low	DLA-4133-1	wget@1.21-1+deb11u1	1.21-1+deb11u2
Low	DLA-4497-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u10
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u7	3.7.1-5+deb11u9
Low	DLA-4429-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u8
Low	DLA-4146-1	libxml2@2.9.10+dfsg-6.7+deb11u6	2.9.10+dfsg-6.7+deb11u7
Low	DLA-4176-1	openssl@1.1.1w-0+deb11u2	1.1.1w-0+deb11u3
Low	DLA-4448-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u9
Low	DLA-4181-1	glibc@2.31-13+deb11u11	2.31-13+deb11u13
Low	DLA-4139-1	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u5
Low	PYSEC-2026-2275	requests@2.32.3	2.33.0
Low	DLA-4128-1	glib2.0@2.66.8-1+deb11u5	2.66.8-1+deb11u6
Low	DLA-4306-1	pam@1.4.0-9+deb11u1	1.4.0-9+deb11u2
Low	DLA-4154-1	mariadb-10.5@1:10.5.28-0+deb11u1	1:10.5.28-0+deb11u2
Low	DLA-4130-1	shadow@1:4.8.1-1	1:4.8.1-1+deb11u1
Low	PYSEC-2026-2151	flask@3.1.0	3.1.3
Low	DLA-4217-1	icu@67.1-7	67.1-7+deb11u1
Low	DLA-4396-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u1
Low	DLA-4491-1	glib2.0@2.66.8-1+deb11u5	2.66.8-1+deb11u8
Low	DLA-4143-1	glibc@2.31-13+deb11u11	2.31-13+deb11u12
Low	GHSA-5xmw-vc9v-4wf2	pillow@11.2.1	12.2.0
Low	DLA-4195-1	krb5@1.18.3-6+deb11u6	1.18.3-6+deb11u7
Low	DLA-4420-1	postgresql-13@13.20-0+deb11u1	13.23-0+deb11u1
Low	GHSA-r73j-pqj5-w3x7	pillow@11.2.1	12.2.0
Low	GHSA-jp4c-xjxw-mgf9	pip@24.0	26.1
Low	GHSA-wjx4-4jcj-g98j	pillow@11.2.1	12.2.0
Low	DLA-4424-1	openjpeg2@2.4.0-3+deb11u1	2.4.0-3+deb11u2
Low	GHSA-4x4j-2g7c-83w6	pillow@11.2.1	12.3.0
Low	GHSA-58qw-9mgm-455v	pip@24.0	26.1
Low	DLA-4156-1	openssh@1:8.4p1-5+deb11u4	1:8.4p1-5+deb11u5
Low	DLA-4225-1	gdk-pixbuf@2.42.2+dfsg-1+deb11u2	2.42.2+dfsg-1+deb11u3
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u6	2.9.10+dfsg-6.7+deb11u9
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u14	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2025b-0+deb11u1	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GHSA-6vgw-5pg2-w6jp	pip@24.0	26.0
Low	GHSA-4grg-w6v8-c28g	flask@3.1.0	3.1.1

Used by

1 chart

Chart	Version	Tag	Containers
hasher-matcher-actionerhasher-matcher-actioner	1.0.0	1.0.17	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.