ghcr.io/gabe565/obico/web:latest container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/gabe565/obico/web
ghcr.io/gabe565/obico/web:latest resolved to a5c1daef46c0, scanned 14 Sept 2026: 152 findings, 2 critical; deployed by 1 chart, among them obico.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
152 distinct on this digest
Findings for digest a5c1daef46c0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2025-1094 | postgresql15 | 15.11-r0 |
| Critical | ALPINE-CVE-2025-6965 | sqlite | 3.41.2-r4 |
| High | PYSEC-2024-24 | aiohttp | 3.9.2 |
| High | GHSA-frmv-pr5f-9mcr | django | 4.2.26 |
| Medium | GHSA-6w2r-r2m5-xq5w | django | 4.2.24 |
| Medium | ALPINE-CVE-2024-37371 | krb5 | 1.20.2-r1 |
| Medium | GHSA-r3xc-prgr-mg9p | django | 4.1.9 |
| Medium | ALPINE-CVE-2021-27219 | glib | 2.66.6-r0 |
| Medium | GHSA-jh3w-4vvf-mjgr | django | 4.1.10 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | GHSA-qw25-v68c-qjf3 | django | 4.2.26 |
| Medium | ALPINE-CVE-2023-36054 | krb5 | 1.20.2-r0 |
| Medium | PYSEC-2026-2269 | pyopenssl | 26.0.0 |
| Medium | GHSA-847f-9342-265h | h2 | 4.3.0 |
| Medium | ALPINE-CVE-2024-8176 | expat | 2.7.0-r0 |
| Medium | ALPINE-CVE-2024-9681 | curl | 8.11.0-r0 |
| Medium | ALPINE-CVE-2025-0725 | curl | 8.12.0-r0 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | GHSA-5m98-qgg9-wh84 | aiohttp | 3.9.4 |
| Medium | ALPINE-CVE-2025-0665 | curl | 8.12.0-r0 |
| Medium | ALPINE-CVE-2025-31115 | xz | 5.4.3-r1 |
| Medium | PYSEC-2026-3717 | django | 5.2.17 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | GHSA-58pv-8j8x-9vj2 | jaraco-context | 6.1.0 |
| Medium | GHSA-63hf-3vf5-4wqf | aiohttp | 3.13.4 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | GHSA-63vm-454h-vhhq | pyasn1 | 0.6.2 |
| Low | ALPINE-CVE-2024-37370 | krb5 | 1.20.2-r1 |
| Low | GHSA-62p4-gmf7-7g93 | pillow | 12.3.0 |
| Low | PYSEC-2026-2098 | aiohttp | 3.13.4 |
| Low | GHSA-p998-jp59-783m | aiohttp | 3.13.4 |
| Low | GHSA-whj4-6x5x-4v2j | pillow | 12.2.0 |
| Low | GHSA-8qpw-xqxj-h4r2 | aiohttp | 3.9.2 |
| Low | GHSA-6jhg-hg63-jvvf | aiohttp | 3.13.3 |
| Low | GHSA-g3cq-j2xw-wf74 | aiohttp | 3.14.1 |
| Low | GHSA-g84x-mcqj-x9qq | aiohttp | 3.13.3 |
| Low | GHSA-vjc4-5qp5-m44j | pillow | 12.3.0 |
| Low | GHSA-gw84-84pc-xp82 | djangorestframework | 3.15.2 |
| Low | GHSA-jj3x-wxrx-4x23 | aiohttp | 3.13.3 |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | GHSA-6mq8-rvhq-8wgg | aiohttp | 3.13.3 |
| Low | GHSA-cfh3-3jmp-rvhc | pillow | 12.1.1 |
| Low | GHSA-63hw-fmq6-xxg2 | aiohttp | 3.14.1 |
| Low | GHSA-2qfp-q593-8484 | brotli | 1.2.0 |
| Low | GHSA-6v7p-g79w-8964 | msgpack | 1.2.1 |
| Low | GHSA-xcgm-r5h9-7989 | aiohttp | 3.14.1 |
| Low | ALPINE-CVE-2024-8096 | curl | 8.10.0-r0 |