StackRadar

ghcr.io/kagent-dev/doc2vec/mcp:1.1.14 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kagent-dev/doc2vec/mcp

ghcr.io/kagent-dev/doc2vec/mcp:1.1.14 resolved to ace1de323f4a, scanned 14 Sept 2026: 99 findings, 0 critical; deployed by 1 chart, among them dapr-agents.

Radar Score

1,104011880

99 findings on digest ace1de323f4a · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.1.14resolves toace1de323f4a1 chart8 days ago0118801,104

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

80 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ace1de323f4a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowCGA-8h52-q2fx-gx4popenssl@3.6.0-r43.6.1-r0
LowGHSA-j3q9-mxjg-w52fpath-to-regexp@8.2.08.4.0
LowCGA-35mx-c7ph-5wqgopenssl@3.6.0-r43.6.3-r5
LowCGA-847w-c3x7-8qp6openssl@3.6.0-r43.6.3-r0
LowGHSA-8r9q-7v3j-jr4g@modelcontextprotocol/sdk@1.12.11.25.2
LowCGA-9f7x-88h6-rvv4glibc@2.42-r42.42-r6
LowCGA-jg28-qhp6-7wvwopenssl@3.6.0-r43.6.3-r0
LowCGA-6ph6-75jp-484pzlib@1.3.1-r511.3.3-r0
LowCGA-2g56-xw2x-g9cxopenssl@3.6.0-r43.6.2-r0
LowCGA-2mgg-q5mj-634rglibc@2.42-r42.42-r6
LowCGA-pcvw-2j52-6586openssl@3.6.0-r43.6.1-r0
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.24.0.6
LowCGA-7vx9-vx96-v3cxnodejs-25@25.2.1-r025.3.0-r0
LowGHSA-w48q-cv73-mx4w@modelcontextprotocol/sdk@1.12.11.24.0
LowCGA-7v63-8w9p-4rh8nodejs-25@25.2.1-r025.3.0-r0
LowCGA-9fv6-c4c7-7xwropenssl@3.6.0-r43.6.3-r0
LowCGA-423r-p3g2-v2wqopenssl@3.6.0-r43.6.3-r0
LowCGA-57jc-36hq-46xfglibc@2.42-r42.42-r7
LowCGA-67j4-8hm8-w6gropenssl@3.6.0-r43.6.1-r3
LowGHSA-2g4f-4pwh-qvx6ajv@6.12.66.14.0
LowCGA-3m2c-2p7h-jh79glibc@2.42-r42.43-r6
LowCGA-2r44-vqvm-32fwnodejs-25@25.2.1-r025.3.0-r0
LowCGA-cfrp-4x8p-ghrropenssl@3.6.0-r43.6.1-r0
LowCGA-2gxw-5ffj-x2phglibc@2.42-r42.43-r7
LowCGA-pg7p-jc78-5qw9glibc@2.42-r42.43-r10
LowGHSA-w5hq-g745-h8pquuid@8.3.211.1.1
LowCGA-28jr-9938-gm2mglibc@2.42-r42.43-r4
LowCGA-4xwj-9j26-j9vvnodejs-25@25.2.1-r025.3.0-r0
LowCGA-6x2v-fqjw-hp38openssl@3.6.0-r43.6.3-r0
LowCGA-6vrx-5w7p-6phjopenssl@3.6.0-r43.6.3-r4
LowGHSA-345p-7cg4-v4c7@modelcontextprotocol/sdk@1.12.11.26.0
LowCGA-2p6j-cvxh-gg7mopenssl@3.6.0-r43.6.3-r0
LowGHSA-869p-cjfg-cm3xjws@3.2.23.2.3
LowCGA-8724-74qp-7vp4openssl@3.6.0-r43.6.1-r0
LowCGA-pjpc-x548-wr62busybox@1.37.0-r501.37.0-r52
LowCGA-54qp-f6pv-w9rwopenssl@3.6.0-r43.6.1-r0
LowGHSA-27v5-c462-wpq7path-to-regexp@8.2.08.4.0
LowCGA-2mm9-q2r2-2j97nodejs-25@25.2.1-r025.3.0-r0
LowCGA-7g67-8qrj-cr3qnghttp2@1.68.0-r01.70.0-r0
LowCGA-r3cw-xg7g-hc2qnodejs-25@25.2.1-r0no fix listed
LowCGA-3944-9ph7-8gccopenssl@3.6.0-r43.6.3-r0
LowGHSA-wqch-xfxh-vrr4body-parser@2.2.02.2.1
LowGHSA-q8mj-m7cp-5q26qs@6.14.06.15.2
LowCGA-3jvw-cpqx-f8w2glibc@2.42-r42.43-r4
LowCGA-rw68-w8qg-8c6vbusybox@1.37.0-r501.37.0-r58
LowCGA-4pxx-5wwr-cqffopenssl@3.6.0-r43.6.2-r0
LowCGA-mp88-rghg-c4wwbusybox@1.37.0-r501.37.0-r58
LowCGA-2rpj-cw45-8qp6openssl@3.6.0-r43.6.3-r0
LowGHSA-4mjr-xmp4-gh2gqs@6.14.06.16.0
LowCGA-4jcv-8vv4-f437openssl@3.6.0-r43.6.3-r0

Used by

1 chart
ChartVersionTagContainers
dapr-agentsdapr-agents-devVerified publisher0.1.51.1.141

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.