ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/innago-property-management/innago-vault-k8s-role-operator
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0 resolved to ed1c3fd04057, scanned 14 Sept 2026: 78 findings, 0 critical; deployed by 1 chart, among them innago-vault-k8s-role-operator.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest ed1c3fd04057 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | ALPINE-CVE-2025-15467 | openssl | 3.5.5-r0 |
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | GHSA-4vgm-c2wm-63mw | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 9.0.14 |
| Medium | ALPINE-CVE-2025-11187 | openssl | 3.5.5-r0 |
| Medium | GHSA-9v76-4qcc-frgh | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 9.0.16 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | GHSA-73j8-2gch-69rq | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.14 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Medium | GHSA-rp2p-6cmp-jxj9 | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.18 |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | GHSA-m93f-wj8c-rp8p | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.19 |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.5.6-r0 |
| Medium | GHSA-cvvh-rhrc-wg4q | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.18 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | GHSA-j8gr-8fp3-5q5h | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 9.0.15 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.5.5-r0 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.5.6-r0 |
| Medium | GHSA-wp74-jgxh-gv4q | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.18 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.5.6-r0 |
| Low | ALPINE-CVE-2025-69420 | openssl | 3.5.5-r0 |
| Low | GHSA-qvw7-jm5c-6hqw | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.18 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-9076 | openssl | 3.5.7-r0 |
| Low | GHSA-w7cw-xp7h-6j5j | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.18 |
| Low | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-45445 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.5.6-r0 |
| Low | GHSA-rvv3-g6hj-g44x | AutoMapper | 15.1.1 |
| Low | ALPINE-CVE-2025-69419 | openssl | 3.5.5-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-42766 | openssl | 3.5.7-r0 |
| Low | GHSA-5wr9-m6jw-xx44 | Scriban | 7.0.0 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-7jvp-hj45-2f2m | Scriban | 7.2.2 |
| Low | GHSA-24c8-4792-22hx | Scriban | 7.2.0 |
| Low | GHSA-x6m9-38vm-2xhf | Scriban | 7.0.0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.5.5-r0 |
| Low | GHSA-74jp-vm22-8q8x | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.18 |
| Low | GHSA-r6mh-95jw-g7qg | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 9.0.19 |
| Low | GHSA-c875-h985-hvrc | Scriban | 7.0.0 |
| Low | GHSA-xcx6-vp38-8hr5 | Scriban | 7.0.0 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| innago-vault-k8s-role-operatorinnagoVerified publisher | 2.0.5 | 2.0.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.