ghcr.io/karakeep-app/karakeep:0.33.2 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep
ghcr.io/karakeep-app/karakeep:0.33.2 resolved to b069e4307dec, scanned 14 Sept 2026: 687 findings, 0 critical; deployed by 1 chart, among them karakeep.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
598 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest b069e4307dec as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-55q2-fjhq-7xh7 | dompurify | 3.4.13 |
| Low | DEBIAN-CVE-2023-48368 | intel-mediasdk | no fix listed |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2024-35369 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-86138 | libxml2 | no fix listed |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | GHSA-jggg-4jg4-v7c6 | protobufjs | 7.5.8 |
| Low | DEBIAN-CVE-2026-86143 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2007-3477 | libwmf | no fix listed |
| Low | DEBIAN-CVE-2025-1371 | elfutils | no fix listed |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-56412 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2025-58436 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-18090 | gdk-pixbuf | no fix listed |
| Low | DEBIAN-CVE-2025-61147 | libde265 | no fix listed |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2026-50219 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-0967 | libssh | no fix listed |
| Low | GHSA-8hcv-x26h-mcgp | re2 | 1.25.1 |
| Low | DEBIAN-CVE-2026-56409 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2023-29932 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2023-29933 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2023-29934 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2023-29935 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2023-29942 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2026-39314 | cups | no fix listed |
| Low | DEBIAN-CVE-2025-59438 | mbedtls | no fix listed |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2023-29939 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2026-27171 | zlib | no fix listed |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-34990 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-32777 | expat | no fix listed |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2025-66442 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2023-29941 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2026-86139 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-16768 | gdk-pixbuf | no fix listed |
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-47709 | libheif | no fix listed |
| Low | DEBIAN-CVE-2026-66037 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-82522 | jpeg-xl | no fix listed |
| Low | GHSA-f88m-g3jw-g9cj | sharp | 0.35.0 |
| Low | GHSA-r7g4-qg5f-qqm2 | nodemailer | 8.0.8 |