ghcr.io/kubenetworks/kubevpn:v2.11.9 container image

GitHub Container Registry

Scanned 18 Sept 2026

Deployed by 1 of 17,803 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kubenetworks/kubevpn

ghcr.io/kubenetworks/kubevpn:v2.11.9 resolved to 3feb9da85270, scanned 18 Sept 2026: 175 findings, 0 critical; deployed by 1 chart, among them kubevpn.

Radar Score

1,6830021154

175 findings on digest 3feb9da85270 · scanned 18 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.11.9resolves to	3feb9da85270	1 chart	yesterday	0021154	1,683

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

175 distinct on this digest

Findings for digest 3feb9da85270 as scanned on 18 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 18 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-5+b1	no fix listed
Low	DEBIAN-CVE-2026-27456	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-18508	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	GO-2026-5622	github.com/containerd/containerd@v1.7.27	no fix listed
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+deb12u2	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.43.0	0.44.0
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-53615	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GO-2025-3787	github.com/go-viper/mapstructure/v2@v2.2.1	2.3.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2026-5884	oras.land/oras-go/v2@v2.5.0	2.6.1
Low	GO-2026-5932	golang.org/x/crypto@v0.49.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.80.0	1.82.1
Low	DEBIAN-CVE-2026-40228	systemd@252.39-1~deb12u2	no fix listed
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v27.5.1+incompatible	28.0.0
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	GHSA-xf85-363p-868w	oras.land/oras-go/v2@v2.5.0	2.6.1
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.32.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.32.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u14	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
kubevpnkubevpn-charts	2.11.9	v2.11.9	4

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.