StackRadar

ghcr.io/leoquote/mergeable:latest container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/leoquote/mergeable

ghcr.io/leoquote/mergeable:latest resolved to 451706815103, scanned 14 Sept 2026: 256 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them mergeable.

Radar Score

4,2230995152

256 findings on digest 451706815103 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to4517068151031 chart8 days ago09951524,223

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

256 distinct on this digest

Findings for digest 451706815103 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.19.01.20.3
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.43.1.3
MediumDLA-2664-1curl@7.52.1-5+deb9u97.52.1-5+deb9u14
MediumGHSA-vh95-rmgr-6w4mminimist@1.2.01.2.3
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.00.5.0
LowGHSA-rhx6-c78j-4q9wpath-to-regexp@0.1.70.1.12
LowGHSA-hj48-42vr-x3v9path-parse@1.0.61.0.7
LowDLA-2976-1gzip@1.6-5+b11.6-5+deb9u1
LowDLA-2977-1xz-utils@5.2.2-1.2+b15.2.2-1.2+deb9u1
LowDLA-2277-1openjpeg2@2.1.2-1.1+deb9u32.1.2-1.1+deb9u5
LowDLA-2904-1expat@2.2.0-2+deb9u32.2.0-2+deb9u4
LowDLA-2378-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u2
LowGHSA-34x7-hfp2-rc4vtar@4.4.137.5.7
LowGHSA-mq66-vcfc-8246mercurial@4.04.9
LowGHSA-9m6j-fcg5-2442url-parse@1.4.41.5.0
LowDLA-2773-1curl@7.52.1-5+deb9u97.52.1-5+deb9u16
LowDSA-4666-1openldap@2.4.44+dfsg-5+deb9u32.4.44+dfsg-5+deb9u4
LowDLA-2437-1krb5@1.15-1+deb9u11.15-1+deb9u2
LowDLA-2333-1imagemagick@8:6.9.7.4+dfsg-11+deb9u78:6.9.7.4+dfsg-11+deb9u9
LowGHSA-rqff-837h-mm52url-parse@1.4.41.5.6
LowDLA-2931-1cyrus-sasl2@2.1.27~101-g0780600+dfsg-3+deb9u12.1.27~101-g0780600+dfsg-3+deb9u2
LowGHSA-rgw5-rvv9-x895brace-expansion@1.1.111.1.18
LowDSA-4715-1imagemagick@8:6.9.7.4+dfsg-11+deb9u78:6.9.7.4+dfsg-11+deb9u8
LowDLA-3044-1glib2.0@2.50.3-2+deb9u12.50.3-2+deb9u3
LowGHSA-9cx6-37pm-9jffhandlebars@4.7.64.7.9
LowDSA-4618-1libexif@0.6.21-2+b20.6.21-2+deb9u1
LowDLA-2366-1imagemagick@8:6.9.7.4+dfsg-11+deb9u78:6.9.7.4+dfsg-11+deb9u10
LowGHSA-f5x3-32g6-xq36tar@4.4.136.2.1
LowGHSA-8cf7-32gw-wr33jsonwebtoken@8.5.19.0.0
LowDSA-4659-1git@1:2.11.0-3+deb9u51:2.11.0-3+deb9u7
LowGHSA-46c4-8wrp-j99vurl-parse@1.4.41.4.5
LowGHSA-qffp-2rhf-9h96tar@4.4.137.5.10
LowDLA-2382-1curl@7.52.1-5+deb9u97.52.1-5+deb9u12
LowDLA-3012-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u7
LowDLA-2837-1gmp@2:6.1.2+dfsg-12:6.1.2+dfsg-1+deb9u1
LowDLA-2802-1elfutils@0.168-10.168-1+deb9u1
LowDLA-2667-1djvulibre@3.5.27.1-73.5.27.1-7+deb9u1
LowGHSA-23hp-3jrh-7fpwtar@4.4.137.5.19
LowDLA-2340-2sqlite3@3.16.2-5+deb9u13.16.2-5+deb9u3
LowGHSA-52cp-r559-cp3mjs-yaml@3.14.03.15.0
LowGHSA-hmw2-7cc7-3qxxform-data@2.3.22.5.6
LowGHSA-7r86-cg39-jmmjminimatch@3.0.43.1.3
LowDLA-2302-1libjpeg-turbo@1:1.5.1-21:1.5.1-2+deb9u1
LowDLA-2513-1p11-kit@0.23.3-20.23.3-2+deb9u1
LowDLA-2439-1libexif@0.6.21-2+b20.6.21-2+deb9u5
LowDLA-2358-1openexr@2.2.0-11+b12.2.0-11+deb9u1
LowGHSA-8qq5-rm4j-mr97tar@4.4.137.5.3
LowDLA-3022-1dpkg@1.18.251.18.26
LowDLA-2657-1lz4@0.0~r131-2+b10.0~r131-2+deb9u1
LowGHSA-23c5-xmqv-rm74minimatch@3.0.43.1.4

Used by

1 chart
ChartVersionTagContainers
mergeabledoubanVerified publisher0.2.2latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.