ghcr.io/linuxserver/booksonic-air:version-v2009.1.0 container image

GitHub Container Registry

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/booksonic-air

ghcr.io/linuxserver/booksonic-air:version-v2009.1.0 resolved to baa4fa9549dc, scanned 15 Sept 2026: 1,177 findings, 21 critical, 10 on KEV; deployed by 1 chart, among them booksonic-air.

Radar Score

19,2342135417703

1,177 findings on digest baa4fa9549dc · scanned 15 Sept 2026

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v2009.1.0resolves to	baa4fa9549dc	1 chart	9 days ago	2135417703	19,234

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

1,177 distinct on this digest

Findings for digest baa4fa9549dc as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2023-43788	libxpm@1:3.5.12-1	1:3.5.12-1ubuntu0.18.04.2+esm1
Low	UBUNTU-CVE-2026-46968	openjdk-8@8u292-b10-0ubuntu1~18.04	8u502-ga~us1-0ubuntu1~18.04
Low	UBUNTU-CVE-2026-65705	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm15
Low	UBUNTU-CVE-2026-65706	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm15
Low	UBUNTU-CVE-2024-36618	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm10
Low	UBUNTU-CVE-2025-4373	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed
Low	UBUNTU-CVE-2023-43789	libxpm@1:3.5.12-1	1:3.5.12-1ubuntu0.18.04.2+esm1
Low	UBUNTU-CVE-2024-21217	openjdk-8@8u292-b10-0ubuntu1~18.04	8u432-ga~us1-0ubuntu2~18.04
Low	UBUNTU-CVE-2023-3576	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4
Low	UBUNTU-CVE-2023-32360	cups@2.2.7-1ubuntu2.8	2.2.7-1ubuntu2.10+esm3
Low	UBUNTU-CVE-2024-36617	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm7
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.2.6.RELEASE	no fix listed
Low	UBUNTU-CVE-2023-39742	giflib@5.1.4-2ubuntu0.1	5.1.4-2ubuntu0.1+esm1
Low	UBUNTU-CVE-2025-0518	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm8
Low	UBUNTU-CVE-2023-25435	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10
Low	UBUNTU-CVE-2023-6135	nss@2:3.35-2ubuntu2.13	no fix listed
Low	UBUNTU-CVE-2026-34979	cups@2.2.7-1ubuntu2.8	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-56826	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2ubuntu0.1~esm4
Low	UBUNTU-CVE-2023-38471	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.11.0	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.52-3build1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-75466	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	no fix listed
Low	UBUNTU-CVE-2025-56226	libsndfile@1.0.28-4ubuntu0.18.04.2	no fix listed
Low	UBUNTU-CVE-2024-11053	curl@7.58.0-2ubuntu3.16	7.58.0-2ubuntu3.24+esm10
Low	UBUNTU-CVE-2025-5372	libssh@0.8.0~20170825.94fa1e38-1ubuntu0.7	no fix listed
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.6.RELEASE	no fix listed
Low	UBUNTU-CVE-2023-38469	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2023-38470	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2023-38472	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2023-38473	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2024-21144	openjdk-8@8u292-b10-0ubuntu1~18.04	8u422-b05-1~18.04
Low	UBUNTU-CVE-2023-3164	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm6
Low	UBUNTU-CVE-2023-21968	openjdk-8@8u292-b10-0ubuntu1~18.04	8u372-ga~us1-0ubuntu1~18.04
Low	UBUNTU-CVE-2026-13595	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2022-2867	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	UBUNTU-CVE-2022-2868	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	UBUNTU-CVE-2022-2869	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	UBUNTU-CVE-2024-21131	openjdk-8@8u292-b10-0ubuntu1~18.04	8u422-b05-1~18.04
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
Low	UBUNTU-CVE-2026-1489	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed
Low	UBUNTU-CVE-2025-7700	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm11
Low	UBUNTU-CVE-2024-50612	libsndfile@1.0.28-4ubuntu0.18.04.2	1.0.28-4ubuntu0.18.04.2+esm2
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.11.0	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.12	42.2.27
Low	UBUNTU-CVE-2024-21208	openjdk-8@8u292-b10-0ubuntu1~18.04	8u432-ga~us1-0ubuntu2~18.04
Low	UBUNTU-CVE-2026-0964	libssh@0.8.0~20170825.94fa1e38-1ubuntu0.7	0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6
Low	UBUNTU-CVE-2023-30086	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.6.RELEASE	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
booksonic-airgeek-cookbookVerified publisher	6.4.2	version-v2009.1.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.