ghcr.io/felddy/foundryvtt:14.368.0 container image
GitHub Container RegistryScanned 16 Oct 2026
Deployed by 1 of 18,137 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/felddy/foundryvtt
ghcr.io/felddy/foundryvtt:14.368.0 resolved to 8ec86078b0c4, scanned 16 Oct 2026: 172 findings, 0 critical; deployed by 1 chart, among them foundry-vtt.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
172 distinct on this digest
Findings for digest 8ec86078b0c4 as scanned on 16 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-107778 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2025-70873 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-19499 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DEBIAN-CVE-2021-45346 | sqlite3 | no fix listed |
| Low | GHSA-2vr4-cq9g-pvrc | ip-address | 10.5.1 |
| Low | DEBIAN-CVE-2021-45261 | patch | no fix listed |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | DEBIAN-CVE-2024-26458 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2026-92392 | curl | 8.14.1-2+deb13u7 |
| Low | DEBIAN-CVE-2026-95209 | gnutls28 | no fix listed |
| Low | DEBIAN-CVE-2026-107161 | cyrus-sasl2 | no fix listed |
| Low | DEBIAN-CVE-2026-72897 | openssl | 3.5.7-1~deb13u3 |
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | GHSA-rpw4-54j3-4h4q | ip-address | 10.5.1 |
| Low | DEBIAN-CVE-2026-95184 | gnutls28 | no fix listed |
| Low | DEBIAN-CVE-2026-103111 | pcre2 | 10.46-1~deb13u3 |
| Low | GHSA-j6r3-76f7-8jcv | ip-address | 10.7.1 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | DEBIAN-CVE-2026-102010 | gcc-14 | no fix listed |
| Low | GHSA-3wwx-pv8p-q78v | undici | 7.29.1 |
| Low | GHSA-3xpg-4rpp-hhhm | undici | 7.29.1 |
| Low | GHSA-2jfj-6hjv-fm6j | undici | 7.29.1 |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-67693 | gnutls28 | no fix listed |
| Low | GHSA-rx4f-c7p8-82vq | undici | 7.29.1 |
| Low | GHSA-h3mg-xc3c-68pw | ip-address | 10.7.1 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | GHSA-pmjh-fq2x-6v4x | undici | 7.29.1 |
| Low | DEBIAN-CVE-2026-77117 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-80489 | glibc | no fix listed |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | DEBIAN-CVE-2011-3374 | apt | no fix listed |
| Low | GHSA-w293-vg96-wgc3 | undici | 7.29.1 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-75806 | openssl | 3.5.7-1~deb13u3 |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-75804 | openssl | 3.5.7-1~deb13u3 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-8674 | glibc | no fix listed |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-42772 | openssl | 3.5.7-1~deb13u3 |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| foundry-vttfoundry-vttVerified publisher | 14.368.2 | 14.368.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.