StackRadar

ghcr.io/karakeep-app/karakeep:0.34.0 container image

GitHub Container Registry

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/karakeep-app/karakeep

ghcr.io/karakeep-app/karakeep:0.34.0 resolved to 151cdd6b5f2e, scanned 21 Oct 2026: 682 findings, 1 critical; deployed by 1 chart, among them karakeep.

Radar Score

6,92610100580

682 findings on digest 151cdd6b5f2e · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.34.0resolves to151cdd6b5f2e1 charttoday101005806,926

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

682 distinct on this digest

Findings for digest 151cdd6b5f2e as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDEBIAN-CVE-2026-34875mbedtls@2.28.3-1no fix listed
MediumDEBIAN-CVE-2026-66040ffmpeg@7:5.1.9-0+deb12u1no fix listed
MediumDEBIAN-CVE-2026-32740libheif@1.15.1-1+deb12u1no fix listed
MediumDEBIAN-CVE-2022-1210tiff@4.5.0-6+deb12u4no fix listed
MediumDEBIAN-CVE-2026-3731libssh@0.10.6-0+deb12u20.10.6-0+deb12u3
MediumDEBIAN-CVE-2023-6277tiff@4.5.0-6+deb12u4no fix listed
MediumDEBIAN-CVE-2026-8924curl@7.88.1-10+deb12u15no fix listed
MediumDEBIAN-CVE-2024-31578ffmpeg@7:5.1.9-0+deb12u1no fix listed
MediumDEBIAN-CVE-2025-13151libtasn1-6@4.19.0-2+deb12u1no fix listed
MediumDEBIAN-CVE-2017-13736graphicsmagick@1.4+really1.3.40-4+deb12u1no fix listed
MediumGO-2026-6612stdlib@go1.20.71.26.9
MediumDEBIAN-CVE-2026-52490tiff@4.5.0-6+deb12u4no fix listed
MediumDEBIAN-CVE-2024-29511ghostscript@10.0.0~dfsg-11+deb12u8no fix listed
MediumDEBIAN-CVE-2019-1010024glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2026-64834ffmpeg@7:5.1.9-0+deb12u1no fix listed
MediumDEBIAN-CVE-2024-26461krb5@1.20.1-2+deb12u5no fix listed
MediumGO-2024-3106stdlib@go1.20.71.22.7
MediumDEBIAN-CVE-2019-6988openjpeg2@2.5.0-2+deb12u3no fix listed
MediumDEBIAN-CVE-2024-23775mbedtls@2.28.3-1no fix listed
MediumDEBIAN-CVE-2024-28960mbedtls@2.28.3-1no fix listed
MediumDEBIAN-CVE-2024-2379curl@7.88.1-10+deb12u15no fix listed
MediumGO-2026-6604stdlib@go1.20.71.26.9
MediumDEBIAN-CVE-2026-67215cjson@1.7.15-1+deb12u4no fix listed
MediumDEBIAN-CVE-2026-8376perl@5.36.0-7+deb12u35.36.0-7+deb12u4
MediumDEBIAN-CVE-2021-36691jpeg-xl@0.7.0-10+deb12u1no fix listed
MediumDEBIAN-CVE-2025-55154graphicsmagick@1.4+really1.3.40-4+deb12u1no fix listed
MediumGO-2024-2609stdlib@go1.20.71.21.8
MediumGO-2024-3107stdlib@go1.20.71.22.7
MediumDEBIAN-CVE-2026-18924curl@7.88.1-10+deb12u15no fix listed
MediumGHSA-f6ww-3ggp-fr8h@xmldom/xmldom@0.9.60.9.10
MediumGHSA-j759-j44w-7fr8@xmldom/xmldom@0.9.60.9.10
MediumDEBIAN-CVE-2026-64830ffmpeg@7:5.1.9-0+deb12u1no fix listed
MediumGHSA-x6wf-f3px-wcqx@xmldom/xmldom@0.9.60.9.10
MediumDEBIAN-CVE-2026-58016glib2.0@2.74.6-2+deb12u9no fix listed
MediumGHSA-27p8-2357-5qqv@xmldom/xmldom@0.9.60.9.12
MediumGHSA-4w3w-2rp5-g8jm@xmldom/xmldom@0.9.60.9.11
MediumGHSA-c7q8-3ch8-vqpv@xmldom/xmldom@0.9.60.9.12
MediumGHSA-w2rr-34g9-rvrj@xmldom/xmldom@0.9.60.9.11
MediumDEBIAN-CVE-2025-29070lcms2@2.14-2+deb12u1no fix listed
MediumGHSA-8344-3jmq-59r6@xmldom/xmldom@0.9.60.9.12
MediumGHSA-93r5-fhx6-vmg9@xmldom/xmldom@0.9.60.9.12
MediumGHSA-965w-775f-mr7g@xmldom/xmldom@0.9.60.9.12
MediumDEBIAN-CVE-2026-8927curl@7.88.1-10+deb12u15no fix listed
MediumDEBIAN-CVE-2026-62292libheif@1.15.1-1+deb12u1no fix listed
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u14no fix listed
MediumGHSA-3px3-54cx-rmw9@xmldom/xmldom@0.9.60.9.12
MediumGO-2026-4601stdlib@go1.20.71.25.8
MediumGHSA-6mj3-qw4j-hgrw@xmldom/xmldom@0.9.60.9.12
MediumGHSA-g53g-w8rj-fmg7@xmldom/xmldom@0.9.60.9.11
MediumGO-2026-4981stdlib@go1.20.71.25.10

Used by

1 chart
ChartVersionTagContainers
karakeephelmforgeVerified publisher1.2.110.34.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.