ghcr.io/karakeep-app/karakeep:0.27.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep
ghcr.io/karakeep-app/karakeep:0.27.1 resolved to abd7d6b11b1b, scanned 14 Sept 2026: 503 findings, 0 critical; deployed by 1 chart, among them karakeep.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
71 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest abd7d6b11b1b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | GHSA-2v35-w6hq-6mfw | @xmldom/ | 0.9.10 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2025-9232 | openssl | 3.5.4-r0 |
| Medium | ALPINE-CVE-2026-5260 | gnutls | 3.8.13-r0 |
| Medium | GHSA-7rqj-j65f-68wh | @auth/ | 0.41.3 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | GHSA-c6mh-fpjc-4pr3 | yt-dlp | 2026.6.9 |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.5.6-r0 |
| Medium | GHSA-m7jm-9gc2-mpf2 | fast-xml-parser | 4.5.4 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.5.5-r0 |
| Medium | GHSA-v9p9-hfj2-hcw8 | undici | 6.24.0 |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-11940 | python3 | 3.12.14-r0 |
| Medium | GHSA-jmr7-xgp7-cmfj | fast-xml-parser | 4.5.4 |
| Medium | GHSA-f6ww-3ggp-fr8h | @xmldom/ | 0.9.10 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 8.21.0 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 9.0.6 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.5.6-r0 |