ghcr.io/immich-app/immich-server:v3.3.4 container image

GitHub Container Registry

Scanned 21 Oct 2026

Deployed by 2 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/immich-app/immich-server

ghcr.io/immich-app/immich-server:v3.3.4 resolved to f6475c58b07a, scanned 21 Oct 2026: 313 findings, 0 critical; deployed by 2 charts, among them immich and immich.

Radar Score

3,0740039273

313 findings on digest f6475c58b07a · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v3.3.4resolves to	f6475c58b07a	2 charts	today	0039273	3,074

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

313 distinct on this digest

Findings for digest f6475c58b07a as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-87862	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87863	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87864	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87865	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87866	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92386	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92387	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92388	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92389	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92390	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92391	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-94266	curl@8.14.1-2+deb13u5	no fix listed
None	DEBIAN-CVE-2026-54920	openexr@3.1.13-2	no fix listed

Used by

2 charts

Chart	Version	Tag	Containers
immichimmich-helmVerified publisher	0.5.1	v3.3.4	1
immichsecustorVerified publisher	2.0.11	v3.3.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.