ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kamilkisiela/graphql-hive/app
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619 resolved to a4a3639899f7, scanned 14 Sept 2026: 216 findings, 1 critical; deployed by 3 charts, among them graphql-hive, hive-app and hive-app.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest a4a3639899f7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-f82v-jwr5-mffw | next | 12.3.5 |
| High | GHSA-r5fr-rjxr-66jc | lodash-es | 4.18.0 |
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.7.3 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-h4j5-c7cj-74xg | xmlhttprequest-ssl | 1.6.2 |
| Medium | GHSA-9c47-m6qq-7p4h | json5 | 2.2.2 |
| Medium | GHSA-72mh-269x-7mh5 | xmlhttprequest-ssl | 1.6.1 |
| Medium | GHSA-7gfc-8cq8-jh5f | next | 14.2.15 |
| Medium | GHSA-mw96-cpmx-2vgc | rollup | 2.80.0 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 6.3.1 |
| Medium | GHSA-43fc-jf86-j433 | axios | 0.30.3 |
| Medium | GHSA-qm95-pgcg-qqfq | socket.io-parser | 3.3.3 |
| Medium | GHSA-xfhh-g9f5-x4m4 | socket.io-parser | 3.3.2 |
| Medium | GHSA-gx9m-whjm-85jf | dompurify | 2.5.0 |
| Medium | GHSA-wf6x-7x77-mvgw | immutable | 3.8.3 |
| Medium | GHSA-p3vf-v8qc-cwcr | dompurify | 2.4.2 |
| Medium | GHSA-fhg7-m89q-25r3 | ua-parser-js | 0.7.33 |
| Medium | GHSA-3xq5-wjfh-ppjc | luxon | 3.2.1 |
| Medium | GHSA-4342-x723-ch2f | next | 14.2.32 |
| Medium | GHSA-rc47-6667-2j5j | http-cache-semantics | 4.1.1 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-3h5v-q93c-6h6q | ws | 5.2.4 |
| Medium | GHSA-r6ch-mqf9-qc9w | undici | 5.19.1 |
| Medium | GHSA-pjwm-pj3p-43mv | axios | 0.32.0 |
| Medium | GHSA-jr5f-v2jv-69x6 | axios | 0.30.0 |
| Medium | GHSA-23wx-cgxq-vpwx | dset | 3.1.2 |
| Medium | GHSA-pfq8-rq6v-vf5m | html-minifier | no fix listed |
| Medium | GHSA-vrm6-8vpv-qv8q | undici | 6.24.0 |
| Medium | GHSA-p9j2-gv94-2wf4 | next | 15.5.21 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-f23m-r3pf-42rh | lodash-es | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash-es | 4.17.23 |
| Medium | GHSA-xvcm-6775-5m9r | immutable | 3.8.4 |
| Medium | GHSA-7hpj-7hhx-2fgx | msgpackr | 1.10.1 |
| Medium | GHSA-67hx-6x53-jw92 | @babel/ | 7.23.2 |
| Medium | GHSA-f6v4-cf5j-vf3w | dset | 3.1.4 |
| Medium | GHSA-cqmj-92xf-r6r9 | socket.io-parser | 3.3.4 |
| Medium | GHSA-qjx8-664m-686j | js-cookie | 3.0.7 |
| Medium | GHSA-v9p9-hfj2-hcw8 | undici | 6.24.0 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 7.0.5 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 0.32.0 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 5.2.5 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Medium | GHSA-pf86-5x62-jrwf | axios | 0.31.1 |
| Medium | GHSA-677m-j7p3-52f9 | socket.io-parser | 3.3.5 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| graphql-hivegraphql-hive | 1.0.0 | 59b64c36c866b3555c135c70de76a884e63f8619 | 1 |
| hive-appgraphql-hive | 1.0.0 | 59b64c36c866b3555c135c70de76a884e63f8619 | 1 |
| hive-appgraphql-hive-subcharts | 1.0.0 | 59b64c36c866b3555c135c70de76a884e63f8619 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.