ghcr.io/ignisda/ryot:v10.5.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/ignisda/ryot

ghcr.io/ignisda/ryot:v10.5.0 resolved to a752b6aee537, scanned 14 Sept 2026: 414 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them ryot.

Radar Score

4,3860454356

414 findings on digest a752b6aee537 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v10.5.0resolves to	a752b6aee537	1 chart	2 days ago	0454356	4,386

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

356 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest a752b6aee537 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.31.0	0.52.0
Low	GHSA-v6wh-96g9-6wx3	vite@6.0.11	6.4.3
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4+deb12u1	1:2.66-4+deb12u3
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-337j-9hxr-rhxg	react-router@7.13.0	7.18.0
Low	GHSA-fv7c-fp4j-7gwp	@babel/plugin-transform-modules-systemjs@7.28.5	7.29.4
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.67.1	1.82.1
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.8	3.3.16
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GHSA-h8fp-f39c-q6mh	react-router@7.13.0	7.18.0
Low	GHSA-525m-7f82-2mf7	@conform-to/dom@1.17.0	1.19.4
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.8	3.3.18
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u2	no fix listed
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.31.0	0.52.0
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-27587	openssl@3.0.20-1~deb12u2	no fix listed
Low	GHSA-vvgj-x9jq-8cj9	github.com/quic-go/quic-go@v0.48.2	0.59.1
Low	DEBIAN-CVE-2013-4392	systemd@252.38-1~deb12u1	no fix listed
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.31.0	1.40.0
Low	DEBIAN-CVE-2026-78408	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-41989	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-g754-hx8w-x2g6	github.com/quic-go/quic-go@v0.48.2	0.57.0
Low	GHSA-q8mj-m7cp-5q26	qs@6.13.0	6.15.2
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@6.0.2	7.0.3
Low	GO-2026-4981	stdlib@go1.23.1	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@252.38-1~deb12u1	no fix listed
Low	GO-2025-3563	stdlib@go1.23.1	1.23.8
Low	GHSA-vmf3-w455-68vh	tar@7.4.3	7.5.16
Low	GO-2026-4977	stdlib@go1.23.1	1.25.10
Low	DEBIAN-CVE-2023-31437	systemd@252.38-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68973	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2
Low	DEBIAN-CVE-2026-16599	wget@1.21.3-1+deb12u1	no fix listed
Low	GO-2026-4986	stdlib@go1.23.1	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.33.0	0.53.0
Low	GO-2026-4918	stdlib@go1.23.1	1.25.10
Low	GO-2026-4337	stdlib@go1.23.1	1.24.13
Low	GHSA-4vj7-5mj6-jm8m	morgan@1.10.1	1.11.0
Low	DEBIAN-CVE-2023-31438	systemd@252.38-1~deb12u1	no fix listed
Low	GO-2026-4601	stdlib@go1.23.1	1.25.8
Low	GHSA-qx2v-qp2m-jg93	postcss@8.5.1	8.5.10
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
ryothelmforgeVerified publisher	1.0.0	v10.5.0	4

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.