StackRadar

ghcr.io/hotio/sonarr:release-4.0.20.3014 container image

GitHub Container Registry

Scanned 14 Oct 2026

Deployed by 1 of 18,117 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/hotio/sonarr

ghcr.io/hotio/sonarr:release-4.0.20.3014 resolved to 52f8f8a16c7b, scanned 14 Oct 2026: 19 findings, 0 critical; deployed by 1 chart, among them sonarr.

Radar Score

22500316

19 findings on digest 52f8f8a16c7b · scanned 14 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

2 digests
TagDigestUsed byLast seenVulnerabilitiesRadar Score
release-4.0.20.3014resolves to52f8f8a16c7b1 chart13 days ago00316225
release-4.0.20.3014ad5f4db97c24—27 days ago00726373

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

16 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 52f8f8a16c7b as scanned on 14 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-19445python3@3.12.14-r03.12.15-r0
LowALPINE-CVE-2026-85091zlib@1.3.2-r01.3.2-r1
LowALPINE-CVE-2026-19553python3@3.12.14-r03.12.15-r0
LowALPINE-CVE-2026-17084python3@3.12.14-r03.12.15-r0
LowGHSA-j3p4-wp97-rph4SixLabors.ImageSharp@3.1.124.1.2
LowGHSA-j9gm-c75j-xc9qSixLabors.ImageSharp@3.1.124.1.2
LowGHSA-jjfr-hcj7-qf5wSixLabors.ImageSharp@3.1.124.1.2
LowALPINE-CVE-2026-19672python3@3.12.14-r03.12.15-r0
LowALPINE-CVE-2026-15806python3@3.12.14-r03.12.15-r0
LowALPINE-CVE-2026-82049python3@3.12.14-r03.12.15-r0
LowALPINE-CVE-2026-87910python3@3.12.14-r03.12.15-r0
LowGHSA-gwg2-r3hj-4w44SixLabors.ImageSharp@3.1.124.1.2
LowGHSA-wmxv-xphr-5c9gSixLabors.ImageSharp@3.1.124.1.2
LowGHSA-846f-f764-76mxSystem.Security.Cryptography.Pkcs@8.0.18.0.2
LowGHSA-2fmv-rv2c-59x7System.Security.Cryptography.Pkcs@8.0.18.0.2
LowALPINE-CVE-2026-15310python3@3.12.14-r03.12.15-r0

Used by

1 chart
ChartVersionTagContainers
sonarralekcVerified publisher1.9.1release-4.0.20.30141

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Oct 2026 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.