StackRadar

ghcr.io/karakeep-app/karakeep:0.34.0 container image

GitHub Container Registry

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep

ghcr.io/karakeep-app/karakeep:0.34.0 resolved to 151cdd6b5f2e, scanned 21 Oct 2026: 682 findings, 1 critical; deployed by 1 chart, among them karakeep.

Radar Score

6,92610100580

682 findings on digest 151cdd6b5f2e · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.34.0resolves to151cdd6b5f2e1 charttoday101005806,926

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

580 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 151cdd6b5f2e as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-8458curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2025-52496mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-77118graphicsmagick@1.4+really1.3.40-4+deb12u1no fix listed
LowDEBIAN-CVE-2026-93543libxi@2:1.8-1+b1no fix listed
LowDEBIAN-CVE-2024-52616avahi@0.8-10+deb12u1no fix listed
LowDEBIAN-CVE-2026-16118glib2.0@2.74.6-2+deb12u9no fix listed
LowDEBIAN-CVE-2026-7010perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowDEBIAN-CVE-2026-49271libheif@1.15.1-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-75146ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowGHSA-rpw4-54j3-4h4qip-address@10.2.010.5.1
LowGHSA-w8wr-v893-vjvptar@7.5.157.5.18
LowGO-2025-4012stdlib@go1.20.71.24.8
LowDEBIAN-CVE-2026-103111pcre2@10.42-110.42-1+deb12u2
LowDEBIAN-CVE-2026-95210gnutls28@3.7.9-2+deb12u7no fix listed
LowGHSA-j6r3-76f7-8jcvip-address@10.2.010.7.1
LowDEBIAN-CVE-2026-78408util-linux@2.38.1-5+deb12u3no fix listed
LowDEBIAN-CVE-2026-53615util-linux@2.38.1-5+deb12u3no fix listed
LowDEBIAN-CVE-2024-36615ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowDEBIAN-CVE-2026-54369acl@2.3.1-3no fix listed
LowDEBIAN-CVE-2026-52492tiff@4.5.0-6+deb12u4no fix listed
LowGO-2026-4980stdlib@go1.20.71.25.10
LowDEBIAN-CVE-2026-70628ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowDEBIAN-CVE-2026-7017perl@5.36.0-7+deb12u35.36.0-7+deb12u4
LowDEBIAN-CVE-2026-86144libxml2@2.9.14+dfsg-1.3~deb12u6no fix listed
LowDEBIAN-CVE-2021-4214libpng1.6@1.6.39-2+deb12u6no fix listed
LowDEBIAN-CVE-2026-47178libheif@1.15.1-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-54371attr@1:2.5.1-4no fix listed
LowDEBIAN-CVE-2026-90816ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowGO-2024-2600stdlib@go1.20.71.21.8
LowDEBIAN-CVE-2026-102010gcc-12@12.2.0-14+deb12u1no fix listed
LowDEBIAN-CVE-2026-95209gnutls28@3.7.9-2+deb12u7no fix listed
LowDEBIAN-CVE-2026-84451libheif@1.15.1-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-101258ghostscript@10.0.0~dfsg-11+deb12u8no fix listed
LowGHSA-3wwx-pv8p-q78vundici@6.26.06.28.1
LowDEBIAN-CVE-2026-88806libx11@2:1.8.4-2+deb12u2no fix listed
LowDEBIAN-CVE-2024-52615avahi@0.8-10+deb12u1no fix listed
LowDEBIAN-CVE-2026-24401avahi@0.8-10+deb12u1no fix listed
LowGO-2025-4011stdlib@go1.20.71.24.8
LowGO-2025-4015stdlib@go1.20.71.24.8
LowDEBIAN-CVE-2025-15079curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2026-58470wget@1.21.3-1+deb12u1no fix listed
LowGHSA-rj75-hqrm-r3gfpostcss-selector-parser@7.1.17.1.6
LowDEBIAN-CVE-2026-25835mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-13858ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowGO-2026-4603stdlib@go1.20.71.25.8
LowGO-2025-4175stdlib@go1.20.71.24.11
LowDEBIAN-CVE-2026-103226ghostscript@10.0.0~dfsg-11+deb12u8no fix listed
LowDEBIAN-CVE-2026-6429curl@7.88.1-10+deb12u15no fix listed
LowGO-2026-4864stdlib@go1.20.71.25.9
LowGO-2026-4982stdlib@go1.20.71.25.10

Used by

1 chart
ChartVersionTagContainers
karakeephelmforgeVerified publisher1.2.110.34.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.