ghcr.io/immich-app/immich-server:v2.3.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/immich-app/immich-server

ghcr.io/immich-app/immich-server:v2.3.1 resolved to f8d06a32b1b2, scanned 14 Sept 2026: 620 findings, 0 critical; deployed by 1 chart, among them immich.

Radar Score

6,94404109506

620 findings on digest f8d06a32b1b2 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.3.1resolves to	f8d06a32b1b2	1 chart	8 days ago	04109506	6,944

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

620 distinct on this digest

Findings for digest f8d06a32b1b2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-58011	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u4
Low	GHSA-23c5-xmqv-rm74	minimatch@10.1.1	10.2.3
Low	GHSA-q7rr-3cgh-j5r3	@opentelemetry/sdk-node@0.207.0	0.217.0
Low	GHSA-q7rr-3cgh-j5r3	@opentelemetry/exporter-prometheus@0.207.0	0.217.0
Low	DEBIAN-CVE-2026-6479	postgresql-17@17.6-2.pgdg13+1	17.10-0+deb13u1
Low	DEBIAN-CVE-2025-15281	glibc@2.41-12	2.41-12+deb13u2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	DEBIAN-CVE-2026-45186	expat@2.7.1-2	2.8.2-1~deb13u1
Low	GHSA-wcpc-wj8m-hjx6	protobufjs@7.5.4	7.6.1
Low	DEBIAN-CVE-2026-42011	gnutls28@3.8.9-3	3.8.9-3+deb13u4
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	DEBIAN-CVE-2026-6464	postgresql-17@17.6-2.pgdg13+1	17.11-0+deb13u1
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-58050	libssh2@1.11.1-1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	GHSA-66ff-xgx4-vchm	protobufjs@7.5.4	7.5.6
Low	DEBIAN-CVE-2026-56208	aom@3.12.1-1	3.12.1-1+deb13u1
Low	DEBIAN-CVE-2026-0990	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.1.0	3.1.4
Low	DEBIAN-CVE-2026-66034	libssh2@1.11.1-1	1.11.1-1+deb13u2
Low	GHSA-8x88-c5mf-7j5w	tar@7.4.3	7.5.18
Low	DEBIAN-CVE-2026-82208	curl@8.14.1-2	no fix listed
Low	DEBIAN-CVE-2025-15661	libssh2@1.11.1-1	1.11.1-1+deb13u1
Low	DEBIAN-CVE-2026-14668	postgresql-17@17.6-2.pgdg13+1	17.11-0+deb13u1
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-2219	dpkg@1.22.21	1.22.22
Low	DEBIAN-CVE-2026-42497	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-41992	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-56211	aom@3.12.1-1	3.12.1-1+deb13u1
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.2	4.0.4
Low	DEBIAN-CVE-2026-12912	tiff@4.7.0-3+deb13u1	4.7.0-3+deb13u3
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2	no fix listed
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2	no fix listed
Low	DEBIAN-CVE-2025-1372	elfutils@0.192-4	no fix listed
Low	GHSA-2g4f-4pwh-qvx6	ajv@8.17.1	8.18.0
Low	DEBIAN-CVE-2026-8286	curl@8.14.1-2	no fix listed
Low	DEBIAN-CVE-2025-1365	elfutils@0.192-4	no fix listed
Low	DEBIAN-CVE-2026-75803	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2
Low	GHSA-r6q2-hw4h-h46w	tar@7.4.3	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.0	4.3.2
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.0	3.1.3
Low	DEBIAN-CVE-2026-14679	postgresql-17@17.6-2.pgdg13+1	17.11-0+deb13u1
Low	DEBIAN-CVE-2025-64181	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2026-4046	glibc@2.41-12	2.41-12+deb13u3
Low	DEBIAN-CVE-2026-40250	openexr@3.1.13-2	no fix listed
Low	DEBIAN-CVE-2023-37769	pixman@0.44.0-3	no fix listed
Low	GHSA-xjpj-3mr7-gcpf	handlebars@4.7.8	4.7.9
Low	GHSA-r292-9mhp-454m	tar@7.4.3	7.5.21
Low	DEBIAN-CVE-2025-15468	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2

Used by

1 chart

Chart	Version	Tag	Containers
immichimmich-helm	0.3.0	v2.3.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.