StackRadar

ghcr.io/juanfont/headscale:v0.25.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/juanfont/headscale

ghcr.io/juanfont/headscale:v0.25.0 resolved to 97febecbe6cb, scanned 14 Sept 2026: 176 findings, 0 critical; deployed by 1 chart, among them headscale.

Radar Score

1,8300131144

176 findings on digest 97febecbe6cb · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v0.25.0resolves to97febecbe6cb1 chart8 days ago01311441,830

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

176 distinct on this digest

Findings for digest 97febecbe6cb as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.32.00.52.0
LowDEBIAN-CVE-2025-15281glibc@2.36-9+deb12u92.36-9+deb12u14
LowDEBIAN-CVE-2026-75803openssl@3.0.15-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-4046glibc@2.36-9+deb12u92.36-9+deb12u14
LowDEBIAN-CVE-2026-5928glibc@2.36-9+deb12u9no fix listed
LowDEBIAN-CVE-2026-6791glibc@2.36-9+deb12u9no fix listed
LowDEBIAN-CVE-2026-4437glibc@2.36-9+deb12u92.36-9+deb12u14
LowGO-2026-4341stdlib@go1.23.41.24.12
LowGHSA-c6gw-w398-hv78github.com/go-jose/go-jose/v4@v4.0.24.0.5
LowGHSA-c6gw-w398-hv78github.com/go-jose/go-jose/v3@v3.0.33.0.4
LowDSA-6015-1openssl@3.0.15-1~deb12u13.0.17-1~deb12u3
LowDEBIAN-CVE-2026-42767openssl@3.0.15-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-63074openssl@3.0.15-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-6238glibc@2.36-9+deb12u9no fix listed
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.32.00.52.0
LowDEBIAN-CVE-2026-5435glibc@2.36-9+deb12u9no fix listed
LowGHSA-fw7p-63qq-7hprfilippo.io/edwards25519@v1.1.01.1.1
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.34.00.55.0
LowDEBIAN-CVE-2025-0395glibc@2.36-9+deb12u92.36-9+deb12u10
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.32.00.45.0
LowGHSA-vvgc-356p-c3xwgolang.org/x/net@v0.34.00.38.0
LowGHSA-rq77-p4h8-4crwgithub.com/gorilla/csrf@v1.7.3-0.20250123201450-9dd6af1f6d301.7.3
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.69.01.83.1
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.32.00.52.0
LowDEBIAN-CVE-2026-22796openssl@3.0.15-1~deb12u13.0.18-1~deb12u2
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.32.00.45.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.32.00.52.0
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.69.01.82.1
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.32.00.52.0
LowDEBIAN-CVE-2025-27587openssl@3.0.15-1~deb12u1no fix listed
LowGHSA-82ff-hg59-8x73github.com/gorilla/csrf@v1.7.3-0.20250123201450-9dd6af1f6d30no fix listed
LowGHSA-2464-8j7c-4cjmgithub.com/go-viper/mapstructure/v2@v2.2.12.4.0
LowGO-2026-4981stdlib@go1.23.41.25.10
LowGO-2025-3563stdlib@go1.23.41.23.8
LowGO-2026-4977stdlib@go1.23.41.25.10
LowGO-2026-4986stdlib@go1.23.41.25.10
LowGO-2026-4918stdlib@go1.23.41.25.10
LowGO-2026-4918golang.org/x/net@v0.34.00.53.0
LowGO-2026-4337stdlib@go1.23.41.24.13
LowDEBIAN-CVE-2026-4438glibc@2.36-9+deb12u92.36-9+deb12u14
LowGO-2026-4601stdlib@go1.23.41.25.8
LowGO-2026-5026stdlib@go1.23.41.25.13
LowGO-2026-5026golang.org/x/net@v0.34.00.55.0
LowGO-2025-3420stdlib@go1.23.41.22.11
LowGO-2026-4342stdlib@go1.23.41.24.12
LowGO-2025-3751stdlib@go1.23.41.23.10
LowDEBIAN-CVE-2024-13176openssl@3.0.15-1~deb12u13.0.16-1~deb12u1
LowGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.69.01.82.2
LowDEBIAN-CVE-2026-45446openssl@3.0.15-1~deb12u13.0.20-1~deb12u2
LowGO-2025-4116golang.org/x/crypto@v0.32.00.43.0

Used by

1 chart
ChartVersionTagContainers
headscalegabe565Verified publisher0.16.0v0.25.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.