StackRadar

ghcr.io/home-operations/beets:2.3.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/home-operations/beets

ghcr.io/home-operations/beets:2.3.1 resolved to cc4975f1a0be, scanned 14 Sept 2026: 240 findings, 1 critical; deployed by 1 chart, among them beets.

Radar Score

2,7331149189

240 findings on digest cc4975f1a0be · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.3.1resolves tocc4975f1a0be1 chart7 days ago11491892,733

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

240 distinct on this digest

Findings for digest cc4975f1a0be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-41254lcms2@2.16-r02.19-r0
LowALPINE-CVE-2026-39979jq@1.7.1-r01.8.2-r0
LowGHSA-v92g-xgxw-vvmmmako@1.3.101.3.11
LowALPINE-CVE-2025-64720libpng@1.6.47-r01.6.51-r0
LowGHSA-9hjg-9r4m-mvj7requests@2.32.32.32.4
LowGHSA-29vq-49wr-vm6xwerkzeug@3.1.33.1.6
LowGHSA-cgwc-pv48-fhj5python-engineio@4.12.14.13.2
LowALPINE-CVE-2026-25833mbedtls@3.6.3.1-r03.6.6-r0
LowGHSA-hgf8-39gv-g3f2werkzeug@3.1.33.1.4
LowALPINE-CVE-2025-66293libpng@1.6.47-r01.6.53-r0
LowALPINE-CVE-2026-42012gnutls@3.8.8-r03.8.13-r0
LowGHSA-g8c6-8fjj-2r4mpython-socketio@5.13.05.14.0
LowALPINE-CVE-2024-23337jq@1.7.1-r01.8.0-r0
LowALPINE-CVE-2026-76956expat@2.7.1-r02.8.4-r0
LowALPINE-CVE-2026-2673openssl@3.5.0-r03.5.6-r0
LowGHSA-5w7q-77mv-v69fpython-socketio@5.13.05.16.2
LowGHSA-m9gh-vj53-gvh9python-engineio@4.12.14.13.2
LowGHSA-8rrh-rw8j-w5fxwheel@0.45.10.46.2
LowALPINE-CVE-2026-42767openssl@3.5.0-r03.5.7-r0
LowALPINE-CVE-2026-5545curl@8.14.0-r28.14.1-r3
LowGHSA-752w-5fwx-jx9fpyjwt@2.10.12.12.0
LowALPINE-CVE-2025-49014jq@1.7.1-r01.8.1-r0
LowALPINE-CVE-2026-42015gnutls@3.8.8-r03.8.13-r0
LowALPINE-CVE-2026-76642util-linux@2.41-r92.41.6-r0
LowALPINE-CVE-2026-63074openssl@3.5.0-r03.5.8-r0
LowGHSA-xg8h-j46f-w952pillow@11.2.111.3.0
LowALPINE-CVE-2025-4575openssl@3.5.0-r03.5.1-r0
LowALPINE-CVE-2025-14831gnutls@3.8.8-r03.8.12-r0
LowGHSA-4xh5-x5gv-qwphpip@25.0.125.3
LowGHSA-pwv6-vv43-88grpillow@11.2.112.2.0
LowALPINE-CVE-2026-34181openssl@3.5.0-r03.5.7-r0
LowALPINE-CVE-2026-25210expat@2.7.1-r02.7.4-r0
LowALPINE-CVE-2025-65018libpng@1.6.47-r01.6.51-r0
LowGHSA-h35f-9h28-mq5csetuptools@80.9.083.0.0
LowALPINE-CVE-2025-52496mbedtls@3.6.3.1-r03.6.4-r0
LowGHSA-fj7v-r99m-22gqpillow@11.2.112.3.0
LowALPINE-CVE-2026-40200musl@1.2.5-r101.2.5-r12
LowALPINE-CVE-2025-62408c-ares@1.34.5-r01.34.6-r0
LowALPINE-CVE-2025-66199openssl@3.5.0-r03.5.5-r0
LowPYSEC-2026-3721pip@25.0.126.2
LowALPINE-CVE-2025-47808gst-plugins-base@1.26.1-r01.26.2-r0
LowALPINE-CVE-2026-25835mbedtls@3.6.3.1-r03.6.6-r0
LowALPINE-CVE-2026-22796openssl@3.5.0-r03.5.5-r0
LowALPINE-CVE-2025-49601mbedtls@3.6.3.1-r03.6.4-r0
LowALPINE-CVE-2025-10148curl@8.14.0-r28.14.1-r2
LowGHSA-87hc-h4r5-73f7werkzeug@3.1.33.1.5
LowALPINE-CVE-2026-4878libcap@2.76-r02.78-r0
LowALPINE-CVE-2026-34743xz@5.8.1-r05.8.3-r0
LowGHSA-pq67-6m6q-mj2vurllib3@2.4.02.5.0
LowGHSA-3gxm-wfjx-m847beets@2.3.12.10.0

Used by

1 chart
ChartVersionTagContainers
beetsk8s-home-lab-repo3.1.12.3.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.