ghcr.io/immich-app/immich-server:v2.3.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/immich-app/immich-server

ghcr.io/immich-app/immich-server:v2.3.1 resolved to f8d06a32b1b2, scanned 14 Sept 2026: 620 findings, 0 critical; deployed by 1 chart, among them immich.

Radar Score

6,94404109506

620 findings on digest f8d06a32b1b2 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.3.1resolves to	f8d06a32b1b2	1 chart	8 days ago	04109506	6,944

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

620 distinct on this digest

Findings for digest f8d06a32b1b2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-cw26-7653-2rp5	exiftool-vendored@31.3.0	35.19.0
Low	GHSA-685m-2w69-288q	protobufjs@7.5.4	7.5.6
Low	GHSA-75px-5xx7-5xc7	protobufjs@7.5.4	7.5.6
Low	DEBIAN-CVE-2026-0915	glibc@2.41-12	2.41-12+deb13u2
Low	DEBIAN-CVE-2026-58014	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u4
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	DEBIAN-CVE-2026-4775	tiff@4.7.0-3+deb13u1	4.7.0-3+deb13u2
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2	no fix listed
Low	DEBIAN-CVE-2026-5773	curl@8.14.1-2	8.14.1-2+deb13u4
Low	GHSA-5375-pq7m-f5r2	@grpc/grpc-js@1.14.0	1.14.4
Low	GHSA-9cx6-37pm-9jff	handlebars@4.7.8	4.7.9
Low	DEBIAN-CVE-2026-63072	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2
Low	DEBIAN-CVE-2026-40355	krb5@1.21.3-5	1.21.3-5+deb13u1
Low	GHSA-gr94-w7qr-f4j3	engine.io@6.6.4	6.6.7
Low	DEBIAN-CVE-2026-40356	krb5@1.21.3-5	1.21.3-5+deb13u1
Low	DEBIAN-CVE-2026-45445	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-6637	postgresql-17@17.6-2.pgdg13+1	17.10-0+deb13u1
Low	GHSA-6g55-p6wh-862q	postcss@8.5.6	8.5.12
Low	DEBIAN-CVE-2026-18408	postgresql-17@17.6-2.pgdg13+1	17.11-0+deb13u1
Low	GHSA-qffp-2rhf-9h96	tar@7.4.3	7.5.10
Low	DEBIAN-CVE-2026-80230	curl@8.14.1-2	no fix listed
Low	DEBIAN-CVE-2026-15741	postgresql-17@17.6-2.pgdg13+1	17.11-0+deb13u1
Low	DEBIAN-CVE-2026-34545	openexr@3.1.13-2	no fix listed
Low	GHSA-23hp-3jrh-7fpw	tar@7.4.3	7.5.19
Low	DEBIAN-CVE-2026-42013	gnutls28@3.8.9-3	3.8.9-3+deb13u4
Low	DEBIAN-CVE-2026-0861	glibc@2.41-12	2.41-12+deb13u2
Low	GHSA-wmrf-hv6w-mr66	kysely@0.28.2	0.28.12
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.0	4.3.0
Low	DEBIAN-CVE-2026-3833	gnutls28@3.8.9-3	3.8.9-3+deb13u4
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7	no fix listed
Low	DEBIAN-CVE-2026-34588	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-31789	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2
Low	DEBIAN-CVE-2025-69419	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Low	GHSA-8cpq-38p9-67gx	kysely@0.28.2	0.28.14
Low	DEBIAN-CVE-2026-54874	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2
Low	DEBIAN-CVE-2026-6475	postgresql-17@17.6-2.pgdg13+1	17.10-0+deb13u1
Low	GHSA-7r86-cg39-jmmj	minimatch@10.1.1	10.2.3
Low	GHSA-vghf-hv5q-vc2g	validator@13.15.20	13.15.22
Low	DEBIAN-CVE-2026-42766	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-66035	libssh2@1.11.1-1	1.11.1-1+deb13u2
Low	GHSA-2m8v-j782-fhvr	socket.io-parser@4.2.4	4.2.7
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	GHSA-8qq5-rm4j-mr97	tar@7.4.3	7.5.3
Low	DEBIAN-CVE-2026-86145	pcre2@10.45-1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-34543	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-63075	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2
Low	GHSA-rcmh-qjqh-p98v	nodemailer@7.0.10	7.0.11
Low	GHSA-v39h-62p7-jpjc	fast-uri@3.1.0	3.1.2

Used by

1 chart

Chart	Version	Tag	Containers
immichimmich-helm	0.3.0	v2.3.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.