ghcr.io/karakeep-app/karakeep:0.34.0 container image

GitHub Container Registry

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep

ghcr.io/karakeep-app/karakeep:0.34.0 resolved to 151cdd6b5f2e, scanned 21 Oct 2026: 682 findings, 1 critical; deployed by 1 chart, among them karakeep.

Radar Score

6,92610100580

682 findings on digest 151cdd6b5f2e · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.34.0resolves to	151cdd6b5f2e	1 chart	today	10100580	6,926

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

580 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 151cdd6b5f2e as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2023-2382	stdlib@go1.20.7	1.20.12
Low	DEBIAN-CVE-2026-65703	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	GO-2026-6617	stdlib@go1.20.7	1.26.9
Low	DEBIAN-CVE-2026-87933	cjson@1.7.15-1+deb12u4	no fix listed
Low	GO-2024-3105	stdlib@go1.20.7	1.22.7
Low	GO-2025-4007	stdlib@go1.20.7	1.24.9
Low	DEBIAN-CVE-2026-107708	krb5@1.20.1-2+deb12u5	no fix listed
Low	GO-2026-6608	stdlib@go1.20.7	1.26.9
Low	DEBIAN-CVE-2026-12912	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-12064	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2025-70103	jpeg-xl@0.7.0-10+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-rfgv-xxqx-mfg5	undici@6.26.0	6.28.1
Low	GO-2026-6607	stdlib@go1.20.7	1.26.9
Low	DEBIAN-CVE-2026-95619	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-1372	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2026-88372	libsndfile@1.2.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-8286	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2025-1365	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2026-107695	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-39329	openjpeg2@2.5.0-2+deb12u3	no fix listed
Low	GO-2025-4013	stdlib@go1.20.7	1.24.8
Low	DEBIAN-CVE-2026-32741	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u14	no fix listed
Low	GO-2026-6609	stdlib@go1.20.7	1.26.9
Low	GHSA-w5hq-g745-h8pq	uuid@8.3.2	11.1.1
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	DEBIAN-CVE-2026-80230	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-59844	libssh@0.10.6-0+deb12u2	0.10.6-0+deb12u3
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2025-68431	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6385	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-32570	dav1d@1.0.0-2+deb12u1	no fix listed
Low	GO-2025-3420	stdlib@go1.20.7	1.22.11
Low	DEBIAN-CVE-2026-107778	krb5@1.20.1-2+deb12u5	no fix listed
Low	GO-2025-3956	stdlib@go1.20.7	1.23.12
Low	GO-2026-4946	stdlib@go1.20.7	1.25.9
Low	DEBIAN-CVE-2024-50613	libsndfile@1.2.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@5.0.6	5.0.10
Low	GHSA-qhr7-859c-m2p7	brace-expansion@5.0.6	5.0.11
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.9.6	0.9.12
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-59850	libssh@0.10.6-0+deb12u2	0.10.6-0+deb12u3
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	DEBIAN-CVE-2026-66039	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8177	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-88373	libde265@1.0.11-1+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-67217	cjson@1.7.15-1+deb12u4	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
karakeephelmforgeVerified publisher	1.2.11	0.34.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.