StackRadar

ghcr.io/home-operations/bazarr:1.5.6 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/home-operations/bazarr

ghcr.io/home-operations/bazarr:1.5.6 resolved to 80cb090162b4, scanned 14 Sept 2026: 159 findings, 0 critical; deployed by 1 chart, among them bazarr.

Radar Score

1,7940026133

159 findings on digest 80cb090162b4 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.5.6resolves to80cb090162b41 chart7 days ago00261331,794

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

133 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 80cb090162b4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-9hw9-ch79-4vh6pillow@12.2.012.3.0
LowGHSA-jjj6-mw9f-p565pillow@12.2.012.3.0
LowALPINE-CVE-2026-14679postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-40164jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-39979jq@1.8.1-r01.8.2-r0
LowGHSA-v92g-xgxw-vvmmmako@1.3.81.3.11
LowALPINE-CVE-2026-8458curl@8.20.0-r18.21.0-r0
LowGHSA-9hjg-9r4m-mvj7requests@2.32.32.32.4
LowGHSA-29vq-49wr-vm6xwerkzeug@3.0.63.1.6
LowGHSA-cgwc-pv48-fhj5python-engineio@4.11.24.13.2
LowALPINE-CVE-2026-9547curl@8.20.0-r18.21.0-r0
LowGHSA-hgf8-39gv-g3f2werkzeug@3.0.63.1.4
LowGHSA-g8c6-8fjj-2r4mpython-socketio@5.12.15.14.0
LowALPINE-CVE-2026-76956expat@2.8.1-r02.8.4-r0
LowGHSA-5w7q-77mv-v69fpython-socketio@5.12.15.16.2
LowGHSA-m9gh-vj53-gvh9python-engineio@4.11.24.13.2
LowALPINE-CVE-2026-9080curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-9545curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-76642util-linux@2.42.1-r02.42.3-r0
LowALPINE-CVE-2026-6471postgresql18@18.4-r018.5-r0
LowGHSA-43qf-4rqw-9q2gflask-cors@5.0.06.0.0
LowALPINE-CVE-2026-63074openssl@3.5.7-r03.5.8-r0
LowGHSA-h35f-9h28-mq5csetuptools@82.0.183.0.0
LowGHSA-fj7v-r99m-22gqpillow@12.2.012.3.0
LowPYSEC-2026-3721pip@26.1.226.2
LowGHSA-cpwx-vrp4-4pq7jinja2@3.1.53.1.6
LowGHSA-87hc-h4r5-73f7werkzeug@3.0.63.1.5
LowGHSA-pq67-6m6q-mj2vurllib3@2.2.32.5.0
LowGHSA-65pc-fj4g-8rjxidna@3.103.15
LowGHSA-7rxf-gvfg-47g4flask-cors@5.0.06.0.0
LowALPINE-CVE-2026-78408util-linux@2.42.1-r02.42.3-r1
LowGHSA-48p4-8xcf-vxj5urllib3@2.2.32.5.0
LowALPINE-CVE-2026-49839jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-76957expat@2.8.1-r02.8.4-r0
LowGHSA-qccp-gfcp-xxvcurllib3@2.2.32.7.0
LowALPINE-CVE-2026-56403expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56404expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56405expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56408expat@2.8.1-r02.8.2-r0
LowGHSA-8vgw-p6qm-5gr7flask-cors@5.0.06.0.0
LowALPINE-CVE-2026-56406expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56407expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56410expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56411expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-78410util-linux@2.42.1-r02.42.3-r0
LowALPINE-CVE-2026-78409util-linux@2.42.1-r02.42.3-r0
LowALPINE-CVE-2026-33947jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-56412expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-33948jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-14672postgresql18@18.4-r018.5-r0

Used by

1 chart
ChartVersionTagContainers
bazarrk8s-home-lab-repo11.3.21.5.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.