ghcr.io/immich-app/immich-server:v2.3.1 container image

GitHub Container Registry

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/immich-app/immich-server

ghcr.io/immich-app/immich-server:v2.3.1 resolved to f8d06a32b1b2, scanned 15 Sept 2026: 620 findings, 0 critical; deployed by 1 chart, among them immich.

Radar Score

6,95604109506

620 findings on digest f8d06a32b1b2 · scanned 15 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.3.1resolves to	f8d06a32b1b2	1 chart	9 days ago	04109506	6,956

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

620 distinct on this digest

Findings for digest f8d06a32b1b2 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-59984	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-59985	openexr@3.1.13-2	no fix listed
Low	GHSA-268h-hp4c-crq3	nodemailer@7.0.10	8.0.9
Low	GHSA-wqvq-jvpq-h66f	nodemailer@7.0.10	8.0.9
Low	DEBIAN-CVE-2026-56391	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-42768	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
Low	GHSA-g8qq-57p8-ggw5	sanitize-html@2.17.0	2.17.7
Low	DEBIAN-CVE-2025-14017	curl@8.14.1-2	no fix listed
Low	DEBIAN-CVE-2026-33165	libde265@1.0.15-1+b3	1.0.15-1+deb13u2
Low	GHSA-2qvq-rjwj-gvw9	handlebars@4.7.8	4.7.9
Low	DEBIAN-CVE-2026-32778	expat@2.7.1-2	2.8.2-1~deb13u1
Low	GHSA-29xp-372q-xqph	tar@7.5.1	7.5.2
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-59183	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-61555	openexr@3.1.13-2	no fix listed
Low	GHSA-vccv-cmxp-4j9h	sanitize-html@2.17.0	2.17.5
Low	GHSA-cc9r-2j5m-2m83	nodemailer@7.0.10	9.1.0
Low	GHSA-wmmp-3585-3rmp	nodemailer@7.0.10	9.1.0
Low	DEBIAN-CVE-2026-32776	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DSA-6076-1	libpng1.6@1.6.48-1	1.6.48-1+deb13u1
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7	no fix listed
Low	DEBIAN-CVE-2026-18495	tiff@4.7.0-3+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-14663	postgresql-17@17.6-2.pgdg13+1	17.11-0+deb13u1
Low	DEBIAN-CVE-2026-55373	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-49337	libde265@1.0.15-1+b3	1.0.15-1+deb13u1
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@7.1.0	7.1.3
Low	DEBIAN-CVE-2025-9714	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u2
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-0989	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	GHSA-w7fw-mjwx-w883	qs@6.14.0	6.14.2
Low	DEBIAN-CVE-2026-6472	postgresql-17@17.6-2.pgdg13+1	17.10-0+deb13u1
Low	DEBIAN-CVE-2026-13595	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-22795	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Low	DEBIAN-CVE-2024-7883	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	DEBIAN-CVE-2026-42770	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
Low	DEBIAN-CVE-2026-55059	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-2003	postgresql-17@17.6-2.pgdg13+1	17.8-0+deb13u1
Low	GHSA-6rw7-vpxm-498p	qs@6.14.0	6.14.1
Low	DEBIAN-CVE-2026-1484	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u3
Low	DEBIAN-CVE-2025-8732	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	DEBIAN-CVE-2026-56131	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-23865	freetype@2.13.3+dfsg-1	2.13.3+dfsg-1+deb13u1
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12	no fix listed
Low	DEBIAN-CVE-2026-0988	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u3
Low	GHSA-v422-hmwv-36x6	body-parser@2.2.0	2.3.0
Low	GHSA-8m3c-c648-2xjj	nodemailer@7.0.10	9.1.1
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-29111	systemd@257.7-1	257.13-1~deb13u1

Used by

1 chart

Chart	Version	Tag	Containers
immichimmich-helm	0.3.0	v2.3.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.