ghcr.io/immich-app/immich-server:v3.1.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/immich-app/immich-server
ghcr.io/immich-app/immich-server:v3.1.0 resolved to b434cb9287ee, scanned 14 Sept 2026: 408 findings, 0 critical; deployed by 1 chart, among them immich.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest b434cb9287ee as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-6253 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-qfvm-cv95-jqjf | multer | 2.3.0 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.41-12+deb13u3 |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-8177 | tiff | no fix listed |
| Low | DEBIAN-CVE-2021-45346 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DEBIAN-CVE-2025-70873 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-56209 | aom | 3.12.1-1+deb13u1 |
| Low | DEBIAN-CVE-2026-57432 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-6276 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-wc9g-mqfw-jrwm | multer | 2.3.0 |
| Low | DEBIAN-CVE-2024-26458 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2026-76956 | expat | no fix listed |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 5.0.5 |
| Low | GHSA-535w-7cp7-47q4 | multer | 2.3.0 |
| Low | DEBIAN-CVE-2025-8176 | tiff | no fix listed |
| Low | DEBIAN-CVE-2026-9080 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-5545 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-48962 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-3784 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-9545 | curl | no fix listed |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | DEBIAN-CVE-2026-59982 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-56210 | aom | 3.12.1-1+deb13u1 |
| Low | DEBIAN-CVE-2025-14819 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | 3.46.1-7+deb13u2 |
| Low | DEBIAN-CVE-2026-11824 | sqlite3 | 3.46.1-7+deb13u2 |
| Low | DEBIAN-CVE-2026-6471 | postgresql-17 | 17.11-0+deb13u1 |
| Low | DEBIAN-CVE-2026-48961 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-34379 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-63074 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2025-14524 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2025-61144 | tiff | no fix listed |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | GHSA-5jgf-p345-68v8 | fast-uri | 3.1.6 |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | DEBIAN-CVE-2026-27622 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-34544 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-53532 | openexr | no fix listed |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | DEBIAN-CVE-2026-25210 | expat | 2.8.2-1~deb13u1 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GHSA-fph4-wmhf-6fwf | fast-uri | 3.1.6 |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
Used by
Also in older indexed versions (1)
Not counted above: the chart’s latest version no longer references it, or the chart is no longer in the index.
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.