ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/huggingface/text-embeddings-inference
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3 resolved to ad950d30878e, scanned 14 Sept 2026: 236 findings, 0 critical; deployed by 1 chart, among them text-embeddings-inference.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest ad950d30878e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-41989 | libgcrypt20 | 1.10.1-3+deb12u1 |
| Low | DEBIAN-CVE-2023-26924 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2025-1377 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-4438 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-1757 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-86142 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-42014 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-4105 | systemd | 252.39-1~deb12u2 |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-45446 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-86138 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-86143 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2025-1371 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2026-40225 | systemd | 252.39-1~deb12u2 |
| Low | DEBIAN-CVE-2023-29932 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2023-29933 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2023-29934 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2023-29935 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2023-29942 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2023-29939 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2026-27171 | zlib | no fix listed |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2023-29941 | llvm-toolchain-14 | no fix listed |
| Low | DEBIAN-CVE-2026-86139 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-11850 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2026-56392 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-54370 | acl | no fix listed |
| Low | DEBIAN-CVE-2025-1376 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2005-2541 | tar | no fix listed |
| Low | DEBIAN-CVE-2025-10966 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-15534 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-56391 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2025-14017 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-86144 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2024-10041 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-18938 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-0989 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | DEBIAN-CVE-2026-13595 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-5278 | coreutils | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| text-embeddings-inferencehelmforgeVerified publisher | 1.0.0 | cpu-1.9.3 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.