ghcr.io/homarr-labs/homarr:v2.2.0 container image

GitHub Container Registry

Scanned 6 Oct 2026

Deployed by 1 of 18,026 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/homarr-labs/homarr

ghcr.io/homarr-labs/homarr:v2.2.0 resolved to 1b4ea544e267, scanned 6 Oct 2026: 37 findings, 0 critical; deployed by 1 chart, among them homarr.

Radar Score

35900037

37 findings on digest 1b4ea544e267 · scanned 6 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.2.0resolves to	1b4ea544e267	1 chart	today	00037	359

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

37 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 1b4ea544e267 as scanned on 6 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 6 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vxpw-j846-p89q	undici@6.26.0	6.27.0
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.6	5.0.9
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.15	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.15	7.5.18
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.6	5.0.8
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.2.0	no fix listed
Low	GHSA-r292-9mhp-454m	tar@7.5.15	7.5.21
Low	GHSA-rfgv-xxqx-mfg5	undici@6.26.0	6.28.1
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@5.0.6	5.0.10
Low	GHSA-qhr7-859c-m2p7	brace-expansion@5.0.6	5.0.11
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GHSA-2vr4-cq9g-pvrc	ip-address@10.2.0	10.5.1
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.2.0	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.15	7.5.18
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.2.0	10.7.1
Low	GHSA-3wwx-pv8p-q78v	undici@6.26.0	6.28.1
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.1	7.1.6
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.15	7.5.17
Low	GHSA-h3mg-xc3c-68pw	ip-address@10.2.0	10.7.1
Low	GHSA-p88m-4jfj-68fv	undici@6.26.0	6.27.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@5.0.6	5.0.7
Low	GHSA-vmf3-w455-68vh	tar@7.5.15	7.5.16
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@7.1.1	7.1.3
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@5.0.6	5.0.12
Low	GHSA-55q2-fjhq-7xh7	dompurify@3.4.11	3.4.13
Low	GHSA-v3r7-h72x-cjcm	undici@6.26.0	6.28.0
Low	GHSA-8xcm-r25x-g524	undici@6.26.0	6.28.0
Low	GHSA-m8rv-5g2x-5cg5	undici@6.26.0	6.28.0
Low	GHSA-35p6-xmwp-9g52	undici@6.26.0	6.27.0
Low	GHSA-r53p-7pc4-xj5r	undici@6.26.0	6.28.1
Low	GHSA-g8m3-5g58-fq7m	undici@6.26.0	6.27.0
Low	GHSA-c2j3-45gr-mqc4	dompurify@3.4.11	3.4.12
Low	GHSA-6688-9rhm-gjv2	dompurify@3.4.11	3.4.16

Used by

1 chart

Chart	Version	Tag	Containers
homarrhomarr-labsOfficialVerified publisher	8.32.0	v2.2.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.