StackRadar

ghcr.io/karakeep-app/karakeep:0.34.0 container image

GitHub Container Registry

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep

ghcr.io/karakeep-app/karakeep:0.34.0 resolved to 151cdd6b5f2e, scanned 21 Oct 2026: 682 findings, 1 critical; deployed by 1 chart, among them karakeep.

Radar Score

6,92610100580

682 findings on digest 151cdd6b5f2e · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.34.0resolves to151cdd6b5f2e1 charttoday101005806,926

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

682 distinct on this digest

Findings for digest 151cdd6b5f2e as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-111153game-music-emu@0.6.3-6no fix listed
LowDEBIAN-CVE-2026-107675ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowDEBIAN-CVE-2025-61147libde265@1.0.11-1+deb12u3no fix listed
LowDEBIAN-CVE-2023-39328openjpeg2@2.5.0-2+deb12u3no fix listed
LowDEBIAN-CVE-2023-48368intel-mediasdk@22.5.4-1no fix listed
LowDEBIAN-CVE-2026-35189openssl@3.0.22-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-19542glibc@2.36-9+deb12u14no fix listed
LowDEBIAN-CVE-2026-18393ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowDEBIAN-CVE-2024-35369ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowDEBIAN-CVE-2025-59438mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-110654zvbi@0.2.41-1+deb12u1no fix listed
LowDEBIAN-CVE-2007-3477libwmf@0.2.12-5.1no fix listed
LowDEBIAN-CVE-2026-56391coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2025-1371elfutils@0.188-2.1no fix listed
LowDEBIAN-CVE-2025-58436cups@2.4.2-3+deb12u9no fix listed
LowDEBIAN-CVE-2026-18090gdk-pixbuf@2.42.10+dfsg-1+deb12u4no fix listed
LowDEBIAN-CVE-2026-39314cups@2.4.2-3+deb12u9no fix listed
LowDEBIAN-CVE-2026-0967libssh@0.10.6-0+deb12u20.10.6-0+deb12u3
LowDEBIAN-CVE-2026-13757p11-kit@0.24.1-2no fix listed
LowDEBIAN-CVE-2025-52497mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-47254libheif@1.15.1-1+deb12u1no fix listed
LowGO-2025-3503stdlib@go1.20.71.23.7
LowDEBIAN-CVE-2017-14159openldap@2.5.13+dfsg-5no fix listed
LowDEBIAN-CVE-2017-18018coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2025-66442mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-16768gdk-pixbuf@2.42.10+dfsg-1+deb12u4no fix listed
LowDEBIAN-CVE-2026-27171zlib@1:1.2.13.dfsg-1no fix listed
LowDEBIAN-CVE-2026-47714libheif@1.15.1-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-107660ffmpeg@7:5.1.9-0+deb12u1no fix listed
LowDEBIAN-CVE-2025-10966curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2026-11850krb5@1.20.1-2+deb12u5no fix listed
LowDEBIAN-CVE-2026-56132expat@2.5.0-1+deb12u4no fix listed
LowDEBIAN-CVE-2025-66382expat@2.5.0-1+deb12u4no fix listed
LowDEBIAN-CVE-2026-15146wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-75805openssl@3.0.22-1~deb12u1no fix listed
LowDEBIAN-CVE-2025-27810mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-54370acl@2.3.1-3no fix listed
LowDEBIAN-CVE-2025-1376elfutils@0.188-2.1no fix listed
LowDEBIAN-CVE-2005-2541tar@1.34+dfsg-1.2+deb12u1no fix listed
LowDEBIAN-CVE-2025-27809mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-47104libusb-1.0@2:1.0.26-1no fix listed
LowDEBIAN-CVE-2024-45157mbedtls@2.28.3-1no fix listed
LowDEBIAN-CVE-2026-87875cups@2.4.2-3+deb12u9no fix listed
LowDEBIAN-CVE-2026-23679libusb-1.0@2:1.0.26-1no fix listed
LowDEBIAN-CVE-2026-47709libheif@1.15.1-1+deb12u1no fix listed
LowGO-2026-4869stdlib@go1.20.71.25.9
LowDEBIAN-CVE-2025-59800ghostscript@10.0.0~dfsg-11+deb12u8no fix listed
LowDEBIAN-CVE-2025-59529avahi@0.8-10+deb12u1no fix listed
LowDEBIAN-CVE-2026-55480cups@2.4.2-3+deb12u9no fix listed
LowDEBIAN-CVE-2026-95512freetype@2.12.1+dfsg-5+deb12u4no fix listed

Used by

1 chart
ChartVersionTagContainers
karakeephelmforgeVerified publisher1.2.110.34.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.