StackRadar

ghcr.io/kagent-dev/doc2vec/mcp:1.1.14 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kagent-dev/doc2vec/mcp

ghcr.io/kagent-dev/doc2vec/mcp:1.1.14 resolved to ace1de323f4a, scanned 14 Sept 2026: 99 findings, 0 critical; deployed by 1 chart, among them dapr-agents.

Radar Score

1,104011880

99 findings on digest ace1de323f4a · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.1.14resolves toace1de323f4a1 chart8 days ago0118801,104

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

99 distinct on this digest

Findings for digest ace1de323f4a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowCGA-2p6j-cvxh-gg7mopenssl@3.6.0-r43.6.3-r0
LowGHSA-869p-cjfg-cm3xjws@3.2.23.2.3
LowCGA-8724-74qp-7vp4openssl@3.6.0-r43.6.1-r0
LowCGA-pjpc-x548-wr62busybox@1.37.0-r501.37.0-r52
LowCGA-54qp-f6pv-w9rwopenssl@3.6.0-r43.6.1-r0
LowGHSA-27v5-c462-wpq7path-to-regexp@8.2.08.4.0
LowCGA-2mm9-q2r2-2j97nodejs-25@25.2.1-r025.3.0-r0
LowCGA-7g67-8qrj-cr3qnghttp2@1.68.0-r01.70.0-r0
LowCGA-r3cw-xg7g-hc2qnodejs-25@25.2.1-r0no fix listed
LowCGA-3944-9ph7-8gccopenssl@3.6.0-r43.6.3-r0
LowGHSA-wqch-xfxh-vrr4body-parser@2.2.02.2.1
LowGHSA-q8mj-m7cp-5q26qs@6.14.06.15.2
LowCGA-3jvw-cpqx-f8w2glibc@2.42-r42.43-r4
LowCGA-rw68-w8qg-8c6vbusybox@1.37.0-r501.37.0-r58
LowCGA-4pxx-5wwr-cqffopenssl@3.6.0-r43.6.2-r0
LowCGA-mp88-rghg-c4wwbusybox@1.37.0-r501.37.0-r58
LowCGA-2rpj-cw45-8qp6openssl@3.6.0-r43.6.3-r0
LowGHSA-4mjr-xmp4-gh2gqs@6.14.06.16.0
LowCGA-4jcv-8vv4-f437openssl@3.6.0-r43.6.3-r0
LowCGA-7j82-7jwr-pm55nodejs-25@25.2.1-r0no fix listed
LowCGA-cxqr-wch6-w4mpopenssl@3.6.0-r43.6.1-r0
LowCGA-rvxm-cf35-h7gfopenssl@3.6.0-r43.6.3-r0
LowCGA-6834-prq9-6rx2busybox@1.37.0-r501.38.0-r0
LowGHSA-w7fw-mjwx-w883qs@6.14.06.14.2
LowCGA-67w2-pcw9-33w2openssl@3.6.0-r43.6.1-r0
LowCGA-48p6-q29j-wfgropenssl@3.6.0-r43.6.3-r0
LowCGA-6rpw-vcvw-6cghnodejs-25@25.2.1-r0no fix listed
LowGHSA-6rw7-vpxm-498pqs@6.14.06.14.1
LowCGA-4m52-xq38-74fxbusybox@1.37.0-r501.38.0-r0
LowCGA-qgph-x37w-3c5gbusybox@1.37.0-r501.38.0-r1
LowGHSA-v422-hmwv-36x6body-parser@2.2.02.3.0
LowCGA-7c6f-ff68-28wgnodejs-25@25.2.1-r0no fix listed
LowCGA-hw4v-jgpg-8794nodejs-25@25.2.1-r0no fix listed
LowCGA-fgvw-px6h-97cpopenssl@3.6.0-r43.6.1-r0
LowCGA-9wvr-5vf8-r8hxnodejs-25@25.2.1-r0no fix listed
LowCGA-2cwp-3wv9-9xfrbusybox@1.37.0-r501.38.0-r0
LowCGA-7rxr-97ww-3g2fnodejs-25@25.2.1-r0no fix listed
LowCGA-2rmw-vgx6-4gw2nodejs-25@25.2.1-r0no fix listed
LowCGA-499w-m9q3-62x4busybox@1.37.0-r501.37.0-r58
LowCGA-f9qv-4jjh-8w3wnodejs-25@25.2.1-r0no fix listed
LowCGA-76h8-mmqr-qg9qnodejs-25@25.2.1-r0no fix listed
LowCGA-r977-4477-4r8popenssl@3.6.0-r43.6.1-r0
LowCGA-cvw6-9pj6-fx5jopenssl@3.6.0-r4no fix listed
LowCGA-ww43-fhm7-mff3openssl@3.6.0-r4no fix listed
LowCGA-qpvq-5fx6-qjf7nodejs-25@25.2.1-r0no fix listed
LowCGA-j345-m9mc-qmxvnodejs-25@25.2.1-r0no fix listed
LowCGA-x526-fwrp-6v3czlib@1.3.1-r511.3.2-r0
LowCGA-pwwv-hw6h-fpq3nodejs-25@25.2.1-r025.3.0-r0
LowCGA-52mh-4gcr-5r65nodejs-25@25.2.1-r0no fix listed

Used by

1 chart
ChartVersionTagContainers
dapr-agentsdapr-agents-devVerified publisher0.1.51.1.141

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.