StackRadar

ghcr.io/home-operations/bazarr:1.5.6 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/home-operations/bazarr

ghcr.io/home-operations/bazarr:1.5.6 resolved to 80cb090162b4, scanned 14 Sept 2026: 159 findings, 0 critical; deployed by 1 chart, among them bazarr.

Radar Score

1,7940026133

159 findings on digest 80cb090162b4 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.5.6resolves to80cb090162b41 chart7 days ago00261331,794

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

133 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 80cb090162b4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-50219expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56409expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-56132expat@2.8.1-r02.8.2-r0
LowPYSEC-2026-2275requests@2.32.32.33.0
LowPYSEC-2026-2151flask@3.0.33.1.3
LowALPINE-CVE-2026-40612jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-44777jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-14663postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-41256jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-43894jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-43896jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-47770jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-41257jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-56131expat@2.8.1-r02.8.2-r0
LowALPINE-CVE-2026-54679jq@1.8.1-r01.8.2-r0
LowGHSA-4x4j-2g7c-83w6pillow@12.2.012.3.0
LowALPINE-CVE-2026-14678postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-18024postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-6470postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-43895jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-14666postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-16241postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-6469postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-14673postgresql18@18.4-r018.5-r0
LowPYSEC-2022-252deep-translator@1.11.4no fix listed
LowRUSTSEC-2024-0436paste@1.0.15no fix listed
LowRUSTSEC-2026-0097rand@0.9.10.8.6
LowRUSTSEC-2026-0105core2@0.4.0no fix listed
LowRUSTSEC-2026-0190anyhow@1.0.981.0.103
LowRUSTSEC-2026-0204crossbeam-epoch@0.9.180.9.20
LowGHSA-5239-wwwm-4pmqpygments@2.19.12.20.0
LowALPINE-CVE-2026-14681postgresql18@18.4-r018.5-r0
LowGHSA-cq8v-f236-94qcrand@0.9.10.9.3

Used by

1 chart
ChartVersionTagContainers
bazarrk8s-home-lab-repo11.3.21.5.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.