ghcr.io/karakeep-app/karakeep:0.33.2 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep
ghcr.io/karakeep-app/karakeep:0.33.2 resolved to b069e4307dec, scanned 14 Sept 2026: 687 findings, 0 critical; deployed by 1 chart, among them karakeep.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
598 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest b069e4307dec as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2023-45913 | mesa | no fix listed |
| Low | DEBIAN-CVE-2026-22693 | harfbuzz | no fix listed |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-41079 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-5673 | libtheora | no fix listed |
| Low | GHSA-58qx-3vcg-4xpx | ws | 8.20.1 |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-52492 | tiff | no fix listed |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 4.0.4 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | GHSA-x445-f3h2-j279 | @auth/ | 0.41.3 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | GHSA-f38q-mgvj-vph7 | protobufjs | 7.6.3 |
| Low | DEBIAN-CVE-2026-15370 | libssh | no fix listed |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-52584 | jpeg-xl | no fix listed |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | DEBIAN-CVE-2023-45919 | mesa | no fix listed |
| Low | GHSA-g6gw-c38x-mqfc | hono | 4.13.5 |
| Low | DEBIAN-CVE-2026-34871 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2026-34979 | cups | no fix listed |
| Low | GHSA-92pp-h63x-v22m | @hono/ | 1.19.13 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-v8jm-5vwx-cfxm | dompurify | 3.2.7 |
| Low | DEBIAN-CVE-2023-38560 | ghostscript | no fix listed |
| Low | DEBIAN-CVE-2026-49271 | libheif | no fix listed |
| Low | DEBIAN-CVE-2023-26924 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2025-56226 | libsndfile | no fix listed |
| Low | GHSA-j3f2-48v5-ccww | protobufjs | 7.6.5 |
| Low | DEBIAN-CVE-2025-1377 | elfutils | no fix listed |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 2.1.2 |
| Low | GHSA-gh4j-gqv2-49f6 | fast-xml-parser | 5.7.0 |
| Low | GHSA-76mc-f452-cxcm | dompurify | 3.4.7 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | DEBIAN-CVE-2023-3164 | tiff | no fix listed |
| Low | GHSA-p88m-4jfj-68fv | undici | 6.27.0 |
| Low | DEBIAN-CVE-2024-23170 | mbedtls | no fix listed |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-8988-4f7v-96qf | @opentelemetry/ | 2.8.0 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2026-76957 | expat | 2.5.0-1+deb12u3 |