StackRadar

ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/k8s-at-home/apache-musicindex

ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2 resolved to c9bd82dc5fda, scanned 14 Sept 2026: 1,100 findings, 12 critical, 2 on KEV; deployed by 1 chart, among them apache-musicindex.

Radar Score

14,6591223222843

1,100 findings on digest c9bd82dc5fda · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.4.1-2resolves toc9bd82dc5fda1 chart8 days ago122322284314,659

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

222 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest c9bd82dc5fda as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2022-25147apr-util@1.6.1-4ubuntu21.6.1-4ubuntu2.1
MediumUBUNTU-CVE-2020-22219flac@1.3.3-1build11.3.3-1ubuntu0.2
MediumUBUNTU-CVE-2020-16156perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.3
MediumUBUNTU-CVE-2026-8927curl@7.68.0-1ubuntu2.127.68.0-1ubuntu2.25+esm4
MediumUBUNTU-CVE-2022-3116heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.1
MediumUBUNTU-CVE-2026-42010gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm2
MediumUBUNTU-CVE-2026-28388openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2023-28321curl@7.68.0-1ubuntu2.127.68.0-1ubuntu2.19
MediumUBUNTU-CVE-2025-69421openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm2
MediumUBUNTU-CVE-2023-1667libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.3
MediumGO-2022-1144stdlib@go1.18.41.18.9
MediumUBUNTU-CVE-2022-0213vim@2:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.14
MediumUBUNTU-CVE-2026-28387openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2025-32988gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm1
MediumUBUNTU-CVE-2022-39408mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.1
MediumUBUNTU-CVE-2022-39410mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.1
MediumUBUNTU-CVE-2026-32316jq@1.6-1ubuntu0.20.04.11.6-1ubuntu0.20.04.1+esm2
MediumUBUNTU-CVE-2026-32327apr-util@1.6.1-4ubuntu21.6.1-4ubuntu2.2+esm1
MediumUBUNTU-CVE-2024-43204apache2@2.4.41-4ubuntu3.122.4.41-4ubuntu3.23+esm2
MediumUBUNTU-CVE-2026-28389openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2026-28390openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2026-33845gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm2

Used by

1 chart
ChartVersionTagContainers
apache-musicindexgeek-cookbookVerified publisher2.4.2v1.4.1-21

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.