StackRadar

ghcr.io/immich-app/immich-server:v3.1.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/immich-app/immich-server

ghcr.io/immich-app/immich-server:v3.1.0 resolved to b434cb9287ee, scanned 14 Sept 2026: 408 findings, 0 critical; deployed by 1 chart, among them immich.

Radar Score

4,2390059348

408 findings on digest b434cb9287ee · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v3.1.0resolves tob434cb9287ee1 chart8 days ago00593484,239

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

59 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest b434cb9287ee as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12+deb13u2no fix listed
MediumDEBIAN-CVE-2017-17740openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2018-20796glibc@2.41-12+deb13u2no fix listed
MediumDEBIAN-CVE-2017-16232tiff@4.7.0-3+deb13u2no fix listed
MediumDEBIAN-CVE-2015-3276openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.41-12+deb13u2no fix listed
MediumDEBIAN-CVE-2018-16376openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2016-9580openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2016-9581openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2016-9114openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2016-9113openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2026-19931curl@8.14.1-2+deb13u3no fix listed
MediumDEBIAN-CVE-2019-9192glibc@2.41-12+deb13u2no fix listed
MediumDEBIAN-CVE-2026-9079curl@8.14.1-2+deb13u3no fix listed
MediumDEBIAN-CVE-2026-63073openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumDEBIAN-CVE-2018-5709krb5@1.21.3-5+deb13u1no fix listed
MediumDEBIAN-CVE-2023-45924libglvnd@1.7.0-1+b2no fix listed
MediumDEBIAN-CVE-2012-0039glib2.0@2.84.4-3~deb13u3no fix listed
MediumDEBIAN-CVE-2026-10536curl@8.14.1-2+deb13u3no fix listed
MediumDEBIAN-CVE-2017-9937jbigkit@2.1-6.1+b2no fix listed
MediumDEBIAN-CVE-2018-6829libgcrypt20@1.11.0-7+deb13u1no fix listed
MediumDEBIAN-CVE-2026-6473postgresql-17@17.10-1.pgdg13+117.11-0+deb13u1
MediumDEBIAN-CVE-2026-18924curl@8.14.1-2+deb13u3no fix listed
MediumDEBIAN-CVE-2026-11856curl@8.14.1-2+deb13u3no fix listed
MediumDEBIAN-CVE-2025-25467x264@2:0.164.3108+git31e19f9-2+b1no fix listed
MediumDEBIAN-CVE-2026-18798openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumDEBIAN-CVE-2016-9116openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2016-9117openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2016-10505openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2011-3389gnutls28@3.8.9-3+deb13u4no fix listed
MediumDEBIAN-CVE-2016-9115openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2026-63076openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumDEBIAN-CVE-2025-59375expat@2.7.1-22.8.2-1~deb13u1
MediumDEBIAN-CVE-2022-1210tiff@4.7.0-3+deb13u2no fix listed
MediumDEBIAN-CVE-2018-10126tiff@4.7.0-3+deb13u2no fix listed
MediumDEBIAN-CVE-2025-13151libtasn1-6@4.20.0-24.20.0-2+deb13u1
MediumDEBIAN-CVE-2024-26461krb5@1.21.3-5+deb13u1no fix listed
MediumDEBIAN-CVE-2019-1010024glibc@2.41-12+deb13u2no fix listed
MediumDEBIAN-CVE-2019-6988openjpeg2@2.5.3-2.1~deb13u2no fix listed
MediumDEBIAN-CVE-2026-5450glibc@2.41-12+deb13u22.41-12+deb13u4
MediumDEBIAN-CVE-2026-14669postgresql-17@17.10-1.pgdg13+117.11-0+deb13u1
MediumDEBIAN-CVE-2023-45931mesa@25.0.7-2no fix listed
MediumDEBIAN-CVE-2026-8924curl@8.14.1-2+deb13u3no fix listed
MediumDEBIAN-CVE-2026-8376perl@5.40.1-65.40.1-6+deb13u1
MediumDEBIAN-CVE-2026-14457openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumDEBIAN-CVE-2026-58016glib2.0@2.84.4-3~deb13u32.84.4-3~deb13u4
MediumDEBIAN-CVE-2018-18064cairo@1.18.4-1+b1no fix listed
MediumDEBIAN-CVE-2026-40393mesa@25.0.7-225.0.7-2+deb13u1
MediumDEBIAN-CVE-2025-29070lcms2@2.16-2+deb13u2no fix listed
MediumDEBIAN-CVE-2026-66046expat@2.7.1-2no fix listed

Used by

1 chart
ChartVersionTagContainers
immichhelmforgeVerified publisher1.2.8v3.1.01

Also in older indexed versions (1)

Not counted above: the chart’s latest version no longer references it, or the chart is no longer in the index.

ChartVersionTagContainers
immichsecustorVerified publisher2.0.3v3.1.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.