ghcr.io/karakeep-app/karakeep:0.33.2 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep

ghcr.io/karakeep-app/karakeep:0.33.2 resolved to b069e4307dec, scanned 14 Sept 2026: 687 findings, 0 critical; deployed by 1 chart, among them karakeep.

Radar Score

6,8220188598

687 findings on digest b069e4307dec · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.33.2resolves to	b069e4307dec	1 chart	8 days ago	0188598	6,822

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

598 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest b069e4307dec as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2023-31437	systemd@252.39-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-59848	libssh@0.10.6-0+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-16599	wget@1.21.3-1+deb12u1	no fix listed
Low	GO-2026-4986	stdlib@go1.20.7	1.25.10
Low	GO-2026-4918	stdlib@go1.20.7	1.25.10
Low	GO-2026-4337	stdlib@go1.20.7	1.24.13
Low	DEBIAN-CVE-2025-10256	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-54764	mbedtls@2.28.3-1	no fix listed
Low	DEBIAN-CVE-2026-65705	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-31438	systemd@252.39-1~deb12u2	no fix listed
Low	GHSA-39q2-94rc-95cp	dompurify@3.2.6	3.4.0
Low	GHSA-5wm8-gmm8-39j9	fast-xml-builder@1.1.4	1.1.7
Low	GHSA-cj63-jhhr-wcxv	dompurify@3.2.6	3.3.2
Low	DEBIAN-CVE-2026-56109	alsa-lib@1.2.8-1+b1	no fix listed
Low	GO-2026-4601	stdlib@go1.20.7	1.25.8
Low	DEBIAN-CVE-2026-65704	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-72522	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56403	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56404	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56405	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56408	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56406	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56407	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56410	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56411	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-6hxr-mr5r-9836	re2@1.23.3	1.25.2
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-rp9w-3fw7-7cwq	dompurify@3.2.6	3.4.7
Low	GO-2026-5026	stdlib@go1.20.7	1.25.13
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2023-47169	intel-mediasdk@22.5.4-1	no fix listed
Low	DEBIAN-CVE-2026-86142	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	GHSA-54fx-42gc-7vw4	hono@4.12.32	4.12.34
Low	GO-2025-3420	stdlib@go1.20.7	1.22.11
Low	DEBIAN-CVE-2026-47254	libheif@1.15.1-1+deb12u1	no fix listed
Low	GO-2026-4342	stdlib@go1.20.7	1.24.12
Low	GO-2024-2598	stdlib@go1.20.7	1.21.8
Low	GO-2025-3751	stdlib@go1.20.7	1.23.10
Low	DEBIAN-CVE-2023-45922	mesa@22.3.6-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-39316	cups@2.4.2-3+deb12u9	no fix listed
Low	GHSA-2x7j-588g-ccc2	nodemailer@7.0.13	9.1.0
Low	DEBIAN-CVE-2023-6601	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-39327	openjpeg2@2.5.0-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-70631	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-70629	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-70630	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-39328	openjpeg2@2.5.0-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-18393	ffmpeg@7:5.1.9-0+deb12u1	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
karakeephelmforgeVerified publisher	1.2.9	0.33.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.