ghcr.io/leoquote/mergeable:latest container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/leoquote/mergeable

ghcr.io/leoquote/mergeable:latest resolved to 451706815103, scanned 14 Sept 2026: 256 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them mergeable.

Radar Score

4,2230995152

256 findings on digest 451706815103 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	451706815103	1 chart	8 days ago	0995152	4,223

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

152 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 451706815103 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DLA-2566-1	libbsd@0.8.3-1	0.8.3-1+deb9u1
Low	GHSA-rv95-896h-c2vc	express@4.17.1	4.19.2
Low	DLA-2760-1	nettle@3.3-1+b2	3.3-1+deb9u1
Low	DSA-4646-1	icu@57.1-6+deb9u3	57.1-6+deb9u4
Low	DLA-2677-1	libwebp@0.5.2-1	0.5.2-1+deb9u1
Low	DLA-2596-1	shadow@1:4.4-4.1	1:4.4-4.1+deb9u1
Low	DLA-2659-1	graphviz@2.38.0-17	2.38.0-17+deb9u1
Low	DLA-2771-1	krb5@1.15-1+deb9u1	1.15-1+deb9u3
Low	GHSA-2g4f-4pwh-qvx6	ajv@5.5.2	6.14.0
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@4.4.13	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.0	3.15.2
Low	GHSA-xjpj-3mr7-gcpf	handlebars@4.7.6	4.7.9
Low	GHSA-r292-9mhp-454m	tar@4.4.13	7.5.21
Low	DLA-3037-1	libjpeg-turbo@1:1.5.1-2	1:1.5.1-2+deb9u2
Low	DLA-2777-1	tiff@4.0.8-2+deb9u4	4.0.8-2+deb9u7
Low	DLA-2672-1	imagemagick@8:6.9.7.4+dfsg-11+deb9u7	8:6.9.7.4+dfsg-11+deb9u13
Low	GHSA-w5hq-g745-h8pq	uuid@3.3.2	11.1.1
Low	GHSA-gxpj-cx7g-858c	debug@4.1.1	4.3.1
Low	DLA-2425-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u5
Low	GHSA-9ppj-qmqm-q256	tar@4.4.13	7.5.11
Low	GHSA-qwph-4952-7xr6	jsonwebtoken@8.5.1	9.0.0
Low	DLA-2445-1	libmaxminddb@1.2.0-1+b1	1.2.0-1+deb9u1
Low	GHSA-mpwj-fcr6-x34c	yarn@1.22.0	1.22.13
Low	DLA-2285-1	librsvg@2.40.16-1+b1	2.40.21-0+deb9u1
Low	DLA-2550-1	openjpeg2@2.1.2-1.1+deb9u3	2.1.2-1.1+deb9u6
Low	DLA-2662-1	postgresql-9.6@9.6.15-0+deb9u1	9.6.22-0+deb9u1
Low	DLA-2669-1	libxml2@2.9.4+dfsg1-2.2+deb9u2	2.9.4+dfsg1-2.2+deb9u5
Low	DLA-2694-1	tiff@4.0.8-2+deb9u4	4.0.8-2+deb9u6
Low	DLA-2817-1	postgresql-9.6@9.6.15-0+deb9u1	9.6.24-0+deb9u1
Low	DLA-3007-1	imagemagick@8:6.9.7.4+dfsg-11+deb9u7	8:6.9.7.4+dfsg-11+deb9u14
Low	DLA-2701-1	openexr@2.2.0-11+b1	2.2.0-11+deb9u3
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	GHSA-rmvr-2pp2-xj38	@octokit/request@5.4.2	8.4.1
Low	DLA-2732-1	openexr@2.2.0-11+b1	2.2.0-11+deb9u4
Low	DLA-2975-1	openjpeg2@2.1.2-1.1+deb9u3	2.1.2-1.1+deb9u7
Low	DLA-2897-1	apr@1.5.2-5	1.5.2-5+deb9u1
Low	GHSA-83g3-92jg-28cx	tar@4.4.13	7.5.8
Low	GHSA-w8wr-v893-vjvp	tar@4.4.13	7.5.18
Low	GHSA-hjrf-2m68-5959	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-h5c3-5r3r-rr8q	@octokit/plugin-paginate-rest@1.1.2	9.2.2
Low	GHSA-xx4v-prfh-6cgc	@octokit/request-error@1.2.1	5.1.1
Low	DLA-2691-1	libgcrypt20@1.7.6-2+deb9u3	1.7.6-2+deb9u4
Low	DLA-2602-1	imagemagick@8:6.9.7.4+dfsg-11+deb9u7	8:6.9.7.4+dfsg-11+deb9u12
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	MAL-2022-4933	npm-cli-docs@0.1.0	no fix listed
Low	DLA-2932-1	tiff@4.0.8-2+deb9u4	4.0.8-2+deb9u8
Low	DSA-4685-1	apt@1.4.9	1.4.10
Low	DLA-2295-1	curl@7.52.1-5+deb9u9	7.52.1-5+deb9u11
Low	GHSA-cm22-4g7w-348p	serve-static@1.14.1	1.16.0

Used by

1 chart

Chart	Version	Tag	Containers
mergeabledoubanVerified publisher	0.2.2	latest	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.