ghcr.io/hotio/sonarr:release-4.0.20.3014 container image
GitHub Container RegistryScanned 14 Oct 2026
Deployed by 1 of 18,117 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/hotio/sonarr
ghcr.io/hotio/sonarr:release-4.0.20.3014 resolved to 52f8f8a16c7b, scanned 14 Oct 2026: 19 findings, 0 critical; deployed by 1 chart, among them sonarr.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
19 distinct on this digest
Findings for digest 52f8f8a16c7b as scanned on 14 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-8g4q-xg66-9fp4 | System.Text.Json | 6.0.10 |
| Medium | GHSA-59j7-ghrg-fj52 | Microsoft.IdentityModel.JsonWebTokens | 6.34.0 |
| Medium | GHSA-59j7-ghrg-fj52 | System.IdentityModel.Tokens.Jwt | 6.34.0 |
| Low | ALPINE-CVE-2026-19445 | python3 | 3.12.15-r0 |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | ALPINE-CVE-2026-19553 | python3 | 3.12.15-r0 |
| Low | ALPINE-CVE-2026-17084 | python3 | 3.12.15-r0 |
| Low | GHSA-j3p4-wp97-rph4 | SixLabors.ImageSharp | 4.1.2 |
| Low | GHSA-j9gm-c75j-xc9q | SixLabors.ImageSharp | 4.1.2 |
| Low | GHSA-jjfr-hcj7-qf5w | SixLabors.ImageSharp | 4.1.2 |
| Low | ALPINE-CVE-2026-19672 | python3 | 3.12.15-r0 |
| Low | ALPINE-CVE-2026-15806 | python3 | 3.12.15-r0 |
| Low | ALPINE-CVE-2026-82049 | python3 | 3.12.15-r0 |
| Low | ALPINE-CVE-2026-87910 | python3 | 3.12.15-r0 |
| Low | GHSA-gwg2-r3hj-4w44 | SixLabors.ImageSharp | 4.1.2 |
| Low | GHSA-wmxv-xphr-5c9g | SixLabors.ImageSharp | 4.1.2 |
| Low | GHSA-846f-f764-76mx | System.Security.Cryptography.Pkcs | 8.0.2 |
| Low | GHSA-2fmv-rv2c-59x7 | System.Security.Cryptography.Pkcs | 8.0.2 |
| Low | ALPINE-CVE-2026-15310 | python3 | 3.12.15-r0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarralekcVerified publisher | 1.9.1 | release-4.0.20.3014 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.