StackRadar

ghcr.io/leoquote/mergeable:latest container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/leoquote/mergeable

ghcr.io/leoquote/mergeable:latest resolved to 451706815103, scanned 14 Sept 2026: 256 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them mergeable.

Radar Score

4,2230995152

256 findings on digest 451706815103 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to4517068151031 chart8 days ago09951524,223

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

152 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 451706815103 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDLA-2491-1openexr@2.2.0-11+b12.2.0-11+deb9u2
LowDLA-2784-1icu@57.1-6+deb9u357.1-6+deb9u5
LowGHSA-p9pc-299p-vxgpyargs-parser@9.0.213.1.2
LowDSA-4622-1postgresql-9.6@9.6.15-0+deb9u19.6.17-0+deb9u1
LowGHSA-gvwx-54wh-qm9jtar@4.4.137.5.17
LowGHSA-7f5c-rpf4-86p8hbs@4.1.1no fix listed
LowDLA-2518-1cairo@1.14.8-11.14.8-1+deb9u1
LowGHSA-m6fv-jmcg-4jfgsend@0.17.10.19.0
LowDLA-2702-1djvulibre@3.5.27.1-73.5.27.1-7+deb9u2
LowDLA-2800-1cups@2.2.1-8+deb9u42.2.1-8+deb9u7
LowDLA-2290-1e2fsprogs@1.43.4-2+deb9u11.43.4-2+deb9u2
LowGHSA-c33w-24p9-8m24configobj@5.0.65.0.9
LowGHSA-qw6h-vgh9-j6wxexpress@4.17.14.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@3.14.03.14.2
LowGHSA-h67p-54hq-rp68js-yaml@3.14.03.15.0
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowGHSA-vmf3-w455-68vhtar@4.4.137.5.16
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.14.03.15.1
LowGHSA-4mjr-xmp4-gh2gqs@6.5.26.16.0
LowDLA-3029-1cups@2.2.1-8+deb9u42.2.1-8+deb9u8
LowDLA-2361-1libx11@2:1.6.4-3+deb9u12:1.6.4-3+deb9u3
LowGHSA-93f3-23rq-pjfpnpm@6.13.46.14.6
LowDLA-2331-1postgresql-9.6@9.6.15-0+deb9u19.6.19-0+deb9u1
LowDLA-2830-1tar@1.29b-1.11.29b-1.1+deb9u1
LowDLA-2312-1libx11@2:1.6.4-3+deb9u12:1.6.4-3+deb9u2
LowDLA-3063-1systemd@232-25+deb9u12232-25+deb9u14
LowGHSA-2qvq-rjwj-gvw9handlebars@4.7.64.7.9
LowDLA-3047-1avahi@0.6.32-20.6.32-2+deb9u1
LowGHSA-w7fw-mjwx-w883qs@6.7.06.14.2
LowDLA-2487-1apt@1.4.91.4.11
LowGHSA-6rw7-vpxm-498pqs@6.5.26.14.1
LowGHSA-v422-hmwv-36x6body-parser@1.19.01.20.6
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.111.1.12
LowGHSA-v78c-4p63-2j6cmoment-timezone@0.5.310.5.35
LowGHSA-jmqm-f2gx-4fjvnpm-registry-fetch@4.0.24.0.5
LowGHSA-4xcv-9jjx-gfj3mem@1.1.04.0.0
LowGHSA-78xj-cgh5-2h22ip@1.1.51.1.9
LowGHSA-7rx3-28cr-v5whhandlebars@4.7.64.7.9
LowDLA-2424-1tzdata@2019c-0+deb9u12020d-0+deb9u1
LowDLA-2509-1tzdata@2019c-0+deb9u12020e-0+deb9u1
LowDLA-2542-1tzdata@2019c-0+deb9u12021a-0+deb9u1
LowDLA-2593-1ca-certificates@20161130+nmu1+deb9u120200601~deb9u2
LowDLA-2751-1postgresql-9.6@9.6.15-0+deb9u19.6.23-0+deb9u1
LowDLA-2759-1gnutls28@3.5.8-5+deb9u43.5.8-5+deb9u6
LowDLA-2761-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u5
LowDLA-2797-1tzdata@2019c-0+deb9u12021a-0+deb9u2
LowDLA-2948-1debian-archive-keyring@2017.5+deb9u12017.5+deb9u2
LowDLA-2963-1tzdata@2019c-0+deb9u12021a-0+deb9u3
LowDLA-3051-1tzdata@2019c-0+deb9u12021a-0+deb9u4
LowGHSA-pxg6-pf52-xh8xcookie@0.3.10.7.0

Used by

1 chart
ChartVersionTagContainers
mergeabledoubanVerified publisher0.2.2latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.