StackRadar

ghcr.io/homarr-labs/homarr:v2.7.0 container image

GitHub Container Registry

Scanned 23 Oct 2026

Deployed by 1 of 18,232 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/homarr-labs/homarr

ghcr.io/homarr-labs/homarr:v2.7.0 resolved to f532ce7cb2a3, scanned 23 Oct 2026: 25 findings, 0 critical; deployed by 1 chart, among them homarr.

Radar Score

21800322

25 findings on digest f532ce7cb2a3 · scanned 23 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.7.0resolves tof532ce7cb2a31 charttoday00322218

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

22 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest f532ce7cb2a3 as scanned on 23 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 23 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-85091zlib@1.3.2-r01.3.2-r1
LowGHSA-68fv-2mgg-jv7qsource-map-js@1.2.11.2.2
LowALPINE-CVE-2026-97629nginx@1.30.4-r11.30.6-r0
LowGHSA-wq5f-xc86-pv6wsharp@0.35.40.35.5
LowGHSA-2464-fhr4-w9xwnext@16.3.616.4.1
LowGHSA-673q-mjm6-r5xrnext@16.3.616.4.1
LowALPINE-CVE-2026-90439nginx@1.30.4-r11.30.6-r0
LowALPINE-CVE-2026-95101nginx@1.30.4-r11.30.6-r0
LowGHSA-cg2g-xh64-v4q7dompurify@3.4.113.4.17
LowGHSA-cjq9-62q9-8jv4next@16.3.616.3.8
LowGHSA-h694-7cp9-m8p3next@16.3.616.3.8
LowGHSA-p3m5-59mp-jv5rnext@16.3.616.4.1
LowGHSA-mrv2-3pqr-j5jrdompurify@3.4.113.4.17
LowGHSA-4jqv-mc3x-m676next@16.3.616.3.8
LowGHSA-55q2-fjhq-7xh7dompurify@3.4.113.4.13
LowGHSA-mcj8-r9mp-w47pnext@16.3.616.3.8
LowGHSA-f87g-xv8r-7p7xnext@16.3.616.3.8
LowGHSA-39w2-rjm5-chcvnext@16.3.616.3.8
LowGHSA-3w37-wq28-93x7next@16.3.616.3.8
LowGHSA-c2j3-45gr-mqc4dompurify@3.4.113.4.12
LowGHSA-6688-9rhm-gjv2dompurify@3.4.113.4.16
LowGHSA-c6gr-qvv4-5v3fdompurify@3.4.113.4.17

Used by

1 chart
ChartVersionTagContainers
homarrhomarr-labsOfficialVerified publisher8.37.0v2.7.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 23 Oct 2026 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.