ghcr.io/linuxserver/bookstack:version-v24.12.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/bookstack

ghcr.io/linuxserver/bookstack:version-v24.12.1 resolved to cc795b254b73, scanned 14 Sept 2026: 212 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them bookstack.

Radar Score

2,8112548157

212 findings on digest cc795b254b73 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v24.12.1resolves to	cc795b254b73	1 chart	8 days ago	2548157	2,811

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

212 distinct on this digest

Findings for digest cc795b254b73 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2026-42945	nginx@1.26.2-r4	1.26.3-r1
Critical	ALPINE-CVE-2025-48384KEV	git@2.47.2-r0	2.47.3-r0
High	ALPINE-CVE-2026-23918	apache2@2.4.62-r0	2.4.67-r0
High	ALPINE-CVE-2025-15467	openssl@3.3.3-r0	3.3.6-r0
High	ALPINE-CVE-2026-49975	apache2@2.4.62-r0	2.4.68-r0
High	ALPINE-CVE-2026-49975	nginx@1.26.2-r4	1.26.3-r1
High	ALPINE-CVE-2026-9256	nginx@1.26.2-r4	1.26.3-r1
Medium	ALPINE-CVE-2026-42055	nginx@1.26.2-r4	1.26.3-r2
Medium	ALPINE-CVE-2026-42533	nginx@1.26.2-r4	1.26.3-r2
Medium	ALPINE-CVE-2025-53020	apache2@2.4.62-r0	2.4.64-r0
Medium	ALPINE-CVE-2026-28780	apache2@2.4.62-r0	2.4.67-r0
Medium	ALPINE-CVE-2021-27219	glib@2.82.5-r0	2.66.6-r0
Medium	ALPINE-CVE-2026-44170	mariadb@11.4.5-r0	11.4.11-r0
Medium	ALPINE-CVE-2025-49796	libxml2@2.13.4-r3	2.13.9-r0
Medium	ALPINE-CVE-2024-56171	libxml2@2.13.4-r3	2.13.4-r4
Medium	ALPINE-CVE-2025-58098	apache2@2.4.62-r0	2.4.66-r0
Medium	ALPINE-CVE-2025-23048	apache2@2.4.62-r0	2.4.64-r0
Medium	ALPINE-CVE-2025-9230	openssl@3.3.3-r0	3.3.5-r0
Medium	ALPINE-CVE-2025-9231	openssl@3.3.3-r0	3.3.5-r0
Medium	ALPINE-CVE-2025-48385	git@2.47.2-r0	2.47.3-r0
Medium	ALPINE-CVE-2025-49794	libxml2@2.13.4-r3	2.13.9-r0
Medium	ALPINE-CVE-2025-6021	libxml2@2.13.4-r3	2.13.9-r0
Medium	ALPINE-CVE-2026-48165	mariadb@11.4.5-r0	11.4.12-r0
Medium	ALPINE-CVE-2025-59375	expat@2.6.4-r0	2.7.2-r0
Medium	ALPINE-CVE-2024-8176	expat@2.6.4-r0	2.7.0-r0
Medium	ALPINE-CVE-2026-25646	libpng@1.6.44-r0	1.6.55-r0
Medium	GHSA-3rg7-wf37-54rm	symfony/http-foundation@v6.4.16	6.4.29
Medium	ALPINE-CVE-2025-49630	apache2@2.4.62-r0	2.4.64-r0
Medium	ALPINE-CVE-2026-34355	apache2@2.4.62-r0	2.4.68-r0
Medium	GHSA-5vg9-5847-vvmq	laravel/framework@v10.48.25	12.60.0
Medium	ALPINE-CVE-2024-43394	apache2@2.4.62-r0	2.4.64-r0
Medium	ALPINE-CVE-2026-44631	apache2@2.4.62-r0	2.4.68-r0
Medium	ALPINE-CVE-2026-24072	apache2@2.4.62-r0	2.4.67-r0
Medium	ALPINE-CVE-2026-44172	mariadb@11.4.5-r0	11.4.11-r0
Medium	ALPINE-CVE-2025-27113	libxml2@2.13.4-r3	2.13.4-r5
Medium	ALPINE-CVE-2026-33416	libpng@1.6.44-r0	1.6.56-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.3.3-r0	3.3.7-r0
Medium	ALPINE-CVE-2026-42536	apache2@2.4.62-r0	2.4.68-r0
Medium	ALPINE-CVE-2025-31115	xz@5.6.3-r0	5.6.3-r1
Medium	ALPINE-CVE-2025-23419	nginx@1.26.2-r4	1.26.3-r0
Medium	ALPINE-CVE-2025-9232	openssl@3.3.3-r0	3.3.5-r0
Medium	ALPINE-CVE-2026-42535	apache2@2.4.62-r0	2.4.68-r0
Medium	GHSA-pcw8-m77r-2528	mtdowling/jmespath.php@2.8.0	2.9.1
Medium	ALPINE-CVE-2026-60005	nginx@1.26.2-r4	1.26.3-r2
Medium	ALPINE-CVE-2026-66046	expat@2.6.4-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-42946	nginx@1.26.2-r4	1.26.3-r1
Medium	ALPINE-CVE-2026-28388	openssl@3.3.3-r0	3.3.7-r0
Medium	ALPINE-CVE-2025-69421	openssl@3.3.3-r0	3.3.6-r0
Medium	ALPINE-CVE-2026-28387	openssl@3.3.3-r0	3.3.7-r0
Medium	ALPINE-CVE-2025-59775	apache2@2.4.62-r0	2.4.66-r0

Used by

1 chart

Chart	Version	Tag	Containers
bookstackgabe565Verified publisher	0.20.0	version-v24.12.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.