ghcr.io/linuxserver/booksonic-air:version-v2009.1.0 container image
GitHub Container RegistryScanned 15 Sept 2026
Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/booksonic-air
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0 resolved to baa4fa9549dc, scanned 15 Sept 2026: 1,177 findings, 21 critical, 10 on KEV; deployed by 1 chart, among them booksonic-air.
Radar Score
1,177 findings on digest baa4fa9549dc · scanned 15 Sept 2026
KEV ×10 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest baa4fa9549dc as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2020-21047 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | GHSA-qxvw-fvwx-5cp7 | mariadb-java-client | 2.7.14 |
| Low | UBUNTU-CVE-2023-39328 | openjpeg2 | no fix listed |
| Low | UBUNTU-CVE-2026-18393 | ffmpeg | no fix listed |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.3.16 |
| Low | UBUNTU-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | UBUNTU-CVE-2026-86138 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2021-20193 | tar | 1.29b-2ubuntu0.3 |
| Low | UBUNTU-CVE-2026-86143 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2025-29088 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2024-21094 | openjdk-8 | 8u412-ga-1~18.04.1 |
| Low | UBUNTU-CVE-2026-18090 | gdk-pixbuf | no fix listed |
| Low | UBUNTU-CVE-2025-9714 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm5 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-8176 | tiff | 4.0.9-5ubuntu0.10+esm8 |
| Low | UBUNTU-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2017-18018 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-86139 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2025-50422 | cairo | no fix listed |
| Low | UBUNTU-CVE-2026-16768 | gdk-pixbuf | no fix listed |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | 0.23.9-2ubuntu0.1+esm1 |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | UBUNTU-CVE-2026-27447 | cups | no fix listed |
| Low | UBUNTU-CVE-2026-11850 | krb5 | no fix listed |
| Low | UBUNTU-CVE-2026-56132 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-34933 | avahi | 0.7-3.1ubuntu1.3+esm4 |
| Low | UBUNTU-CVE-2026-15588 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-8058 | glibc | 2.27-3ubuntu1.6+esm6 |
| Low | UBUNTU-CVE-2021-28429 | ffmpeg | 7:3.4.11-0ubuntu0.1 |
| Low | UBUNTU-CVE-2026-41079 | cups | no fix listed |
| Low | UBUNTU-CVE-2025-64506 | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm1 |
| Low | UBUNTU-CVE-2013-4235 | shadow | 1:4.5-1ubuntu2.5 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | no fix listed |
| Low | UBUNTU-CVE-2025-45582 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.26.1-6ubuntu0.7+esm4 |
| Low | UBUNTU-CVE-2025-58436 | cups | 2.2.7-1ubuntu2.10+esm10 |
| Low | UBUNTU-CVE-2025-59529 | avahi | no fix listed |
| Low | UBUNTU-CVE-2026-90781 | alsa-lib | no fix listed |
| Low | UBUNTU-CVE-2026-52295 | ffmpeg | no fix listed |
| Low | UBUNTU-CVE-2025-14017 | curl | 7.58.0-2ubuntu3.24+esm7 |
| Low | UBUNTU-CVE-2026-86144 | libxml2 | no fix listed |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | no fix listed |
| Low | UBUNTU-CVE-2024-10041 | pam | no fix listed |
| Low | UBUNTU-CVE-2026-59850 | libssh | no fix listed |
| Low | UBUNTU-CVE-2025-8851 | tiff | 4.0.9-5ubuntu0.10+esm8 |
| Low | UBUNTU-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-18495 | tiff | no fix listed |
| Low | UBUNTU-CVE-2023-4641 | shadow | 1:4.5-1ubuntu2.5+esm1 |
| Low | UBUNTU-CVE-2025-68276 | avahi | 0.7-3.1ubuntu1.3+esm3 |
| Low | UBUNTU-CVE-2026-34757 | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| booksonic-airgeek-cookbookVerified publisher | 6.4.2 | version-v2009.1.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.