ghcr.io/it-at-m/zammad-ldap-sync:dev container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/it-at-m/zammad-ldap-sync

ghcr.io/it-at-m/zammad-ldap-sync:dev resolved to 10de22c8cbce, scanned 14 Sept 2026: 95 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them zammad-ldap-sync.

Radar Score

1,345231773

95 findings on digest 10de22c8cbce · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
devresolves to	10de22c8cbce	1 chart	7 days ago	231773	1,345

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

95 distinct on this digest

Findings for digest 10de22c8cbce as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@10.1.34	10.1.35
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@10.1.34	10.1.40
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@10.1.34	10.1.45
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@10.1.34	10.1.42
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@10.1.34	10.1.45
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@10.1.34	10.1.44
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@10.1.34	10.1.55
Medium	GHSA-ff77-26x5-69cr	tomcat-embed-core@10.1.34	10.1.40
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@10.1.34	10.1.55
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@10.1.34	10.1.42
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@10.1.34	10.1.43
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@10.1.34	10.1.55
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@10.1.34	10.1.43
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@10.1.34	10.1.41
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@10.1.34	10.1.58
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.17.0	3.18.0
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@10.1.34	10.1.58
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.18.2	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.18.2	2.18.8
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@10.1.34	10.1.58
Medium	GHSA-r936-gwx5-v52f	spring-webmvc@6.2.1	6.2.10
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@10.1.34	10.1.55
Low	GHSA-9342-92gg-6v29	smtp@2.0.3	2.0.4
Low	RHSA-2026:54268	python3.9@3.9.25-7.el9_8	0:3.9.25-7.el9_8.3
Low	RHSA-2026:39798	python3.9@3.9.25-7.el9_8	0:3.9.25-7.el9_8.2
Low	RHSA-2026:55440	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.9
Low	RHSA-2026:55439	curl@7.76.1-40.el9	0:7.76.1-40.el9_8.5
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@10.1.34	10.1.55
Low	RHSA-2026:42089	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.2
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@10.1.34	10.1.42
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@10.1.34	10.1.52
Low	GHSA-mgp5-rv84-w37q	tomcat-embed-core@10.1.34	10.1.52
Low	RHSA-2026:52674	libarchive@3.5.3-9.el9_7	0:3.5.3-11.el9_8
Low	GHSA-qv9r-c865-cp47	log4j-api@2.24.3	2.25.5
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@10.1.34	10.1.55
Low	GHSA-jmp9-x22r-554x	spring-core@6.2.1	6.2.11
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@10.1.34	10.1.54
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@10.1.34	10.1.54
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@10.1.34	10.1.50
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@10.1.34	10.1.47
Low	GHSA-x23c-287f-qqv5	spring-webmvc@6.2.1	6.2.19
Low	GHSA-6r3c-xf4w-jxjm	spring-web@6.2.1	6.2.8
Low	GHSA-rc42-6c7j-7h5r	spring-boot@3.4.1	3.4.5
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@10.1.34	10.1.42
Low	RHSA-2026:42887	java-17-openjdk@1:17.0.19.0.10-2.el9	1:17.0.20.0.8-1.2.el9
Low	GHSA-r5w3-xv2f-j59q	spring-expression@6.2.1	6.2.19
Low	RHSA-2026:39316	cups@1:2.3.3op2-38.el9_8	1:2.3.3op2-39.el9_8
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@10.1.34	10.1.53
Low	RHSA-2026:39315	libsolv@0.7.24-5.el9_8	0:0.7.24-6.el9_8
Low	GHSA-72hv-8253-57qq	jackson-core@2.18.2	2.18.6

Used by

1 chart

Chart	Version	Tag	Containers
zammad-ldap-syncit-at-mVerified publisher	0.6.5	dev	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.