ghcr.io/formancehq/ledger:v1.9.2 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/formancehq/ledger

ghcr.io/formancehq/ledger:v1.9.2 resolved to 03c1ddbda33b, scanned 14 Sept 2026: 380 findings, 2 critical, 2 on KEV; deployed by 1 chart, among them ledger.

Radar Score

4,6022873297

380 findings on digest 03c1ddbda33b · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v1.9.2resolves to	03c1ddbda33b	1 chart	6 days ago	2873297	4,602

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

380 distinct on this digest

Findings for digest 03c1ddbda33b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2023-4911KEV	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.4
Critical	UBUNTU-CVE-2024-2961	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.7
High	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.21
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.18
High	UBUNTU-CVE-2023-2650	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.10
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.4.0	0.17.0
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.4.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.4.0	0.23.0
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.17
High	UBUNTU-CVE-2024-3596	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.5
Medium	GO-2024-2687	stdlib@go1.18.10	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.4.0	0.52.0
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.17
Medium	UBUNTU-CVE-2022-48522	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.3
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.25
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.4.0	0.31.0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.4.0	0.7.0
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.4.0	0.17.0
Medium	UBUNTU-CVE-2023-0464	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.9
Medium	UBUNTU-CVE-2023-5363	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.12
Medium	UBUNTU-CVE-2024-37371	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.4
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-13ubuntu0.22.04.1	no fix listed
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.17
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.51.0	1.79.3
Medium	GHSA-7jwh-3vrq-q3m8	github.com/jackc/pgproto3/v2@v2.3.1	2.3.3
Medium	GHSA-mrww-27vc-gghv	github.com/jackc/pgx/v4@v4.17.2	4.18.2
Medium	UBUNTU-CVE-2022-40735	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.16
Medium	UBUNTU-CVE-2023-3446	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.12
Medium	UBUNTU-CVE-2016-20013	glibc@2.35-0ubuntu3.1	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.34.0-3ubuntu1.1	no fix listed
Medium	UBUNTU-CVE-2018-5709	krb5@1.19.2-2ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2023-31484	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.2
Medium	UBUNTU-CVE-2023-36054	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.3
Medium	UBUNTU-CVE-2024-33599	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.8
Medium	UBUNTU-CVE-2024-0553	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.4
Medium	UBUNTU-CVE-2022-4899	libzstd@1.4.8+dfsg-3build1	no fix listed
Medium	UBUNTU-CVE-2023-5678	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.14
Medium	UBUNTU-CVE-2025-9230	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.20
Medium	UBUNTU-CVE-2023-6129	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.14
Medium	UBUNTU-CVE-2024-0567	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.4
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.36.4	0.44.0
Medium	UBUNTU-CVE-2023-5156	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9
Medium	UBUNTU-CVE-2026-63076	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.29
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.28.1	1.33.0
Medium	UBUNTU-CVE-2024-0727	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.14
Medium	UBUNTU-CVE-2022-3996	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.9
Medium	UBUNTU-CVE-2024-38428	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.1

Used by

1 chart

Chart	Version	Tag	Containers
ledgerformance	1.2.0	v1.9.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.