ghcr.io/linuxserver/bookstack:version-v24.12.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/bookstack

ghcr.io/linuxserver/bookstack:version-v24.12.1 resolved to cc795b254b73, scanned 14 Sept 2026: 212 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them bookstack.

Radar Score

2,8112548157

212 findings on digest cc795b254b73 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v24.12.1resolves to	cc795b254b73	1 chart	8 days ago	2548157	2,811

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

157 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest cc795b254b73 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-38cx-cq6f-5755	symfony/http-foundation@v6.4.16	6.4.41
Low	GHSA-vqc8-7275-q272	symfony/mime@v6.4.17	6.4.40
Low	GHSA-8hg6-c449-896m	dompdf/dompdf@v3.0.2	3.1.6
Low	ALPINE-CVE-2025-66293	libpng@1.6.44-r0	1.6.53-r0
Low	GHSA-jjv6-8j6v-6j52	league/commonmark@2.6.1	2.9.1
Low	ALPINE-CVE-2026-40460	nginx@1.26.2-r4	1.26.3-r1
Low	ALPINE-CVE-2026-76956	expat@2.6.4-r0	2.8.4-r0
Low	GHSA-j8pm-gj4c-rq4x	league/commonmark@2.6.1	2.9.1
Low	ALPINE-CVE-2026-33523	apache2@2.4.62-r0	2.4.67-r0
Low	ALPINE-CVE-2026-29170	apache2@2.4.62-r0	2.4.68-r0
Low	GHSA-8rr7-cvq3-gmfh	league/commonmark@2.6.1	2.10.0
Low	GHSA-h5x3-xfc9-m39h	symfony/routing@v6.4.16	6.4.41
Low	ALPINE-CVE-2025-66200	apache2@2.4.62-r0	2.4.66-r0
Low	ALPINE-CVE-2025-48386	git@2.47.2-r0	2.47.3-r0
Low	GHSA-3527-qv2q-pfvx	league/commonmark@2.6.1	2.7.0
Low	ALPINE-CVE-2026-25210	expat@2.6.4-r0	2.7.4-r0
Low	ALPINE-CVE-2025-65018	libpng@1.6.44-r0	1.6.53-r0
Low	ALPINE-CVE-2026-44173	mariadb@11.4.5-r0	11.4.11-r0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r9	1.2.5-r11
Low	ALPINE-CVE-2025-62408	c-ares@1.34.3-r0	1.34.6-r0
Low	GHSA-4486-gxhx-5mg7	psy/psysh@v0.12.7	0.12.19
Low	ALPINE-CVE-2025-66199	openssl@3.3.3-r0	3.3.6-r0
Low	GHSA-x6g4-fwcc-jj8w	symfony/dom-crawler@v6.4.16	6.4.40
Low	GHSA-3qpq-r242-jqj7	phpseclib/phpseclib@3.0.43	3.0.52
Low	GHSA-4v26-v6cg-g6f9	robrichards/xmlseclibs@3.1.3	3.1.5
Low	ALPINE-CVE-2026-44171	mariadb@11.4.5-r0	11.4.11-r0
Low	GHSA-cx96-42px-69fm	dompdf/dompdf@v3.0.2	3.1.6
Low	GHSA-c5fp-p67m-gq56	knplabs/knp-snappy@v1.5.0	1.7.0
Low	GHSA-5j8p-438x-rgg5	onelogin/php-saml@4.2.0	4.3.1
Low	GHSA-v5mv-p594-2x33	guzzlehttp/guzzle@7.9.2	7.15.2
Low	ALPINE-CVE-2025-4947	curl@8.12.1-r0	8.14.0-r0
Low	ALPINE-CVE-2026-33007	apache2@2.4.62-r0	2.4.67-r0
Low	ALPINE-CVE-2026-22796	openssl@3.3.3-r0	3.3.6-r0
Low	GHSA-j8qw-6jw8-r297	dompdf/dompdf@v3.0.2	3.1.6
Low	ALPINE-CVE-2025-10148	curl@8.12.1-r0	8.14.1-r2
Low	ALPINE-CVE-2026-34032	apache2@2.4.62-r0	2.4.67-r0
Low	ALPINE-CVE-2026-34743	xz@5.6.3-r0	5.8.3-r0
Low	GHSA-vpr4-p6fq-85jc	knplabs/knp-snappy@v1.5.0	1.7.1
Low	ALPINE-CVE-2026-22801	libpng@1.6.44-r0	1.6.54-r0
Low	ALPINE-CVE-2026-33006	apache2@2.4.62-r0	2.4.67-r0
Low	GHSA-hh8v-hgvp-g3f5	league/commonmark@2.6.1	2.8.2
Low	ALPINE-CVE-2026-33857	apache2@2.4.62-r0	2.4.67-r0
Low	GHSA-72xp-p242-47p9	symfony/routing@v6.4.16	6.4.40
Low	GHSA-29pj-957v-52mc	league/commonmark@2.6.1	2.9.0
Low	GHSA-c4cc-x928-vjw9	robrichards/xmlseclibs@3.1.3	3.1.4
Low	GHSA-r39x-jcww-82v6	symfony/process@v6.4.15	6.4.33
Low	GHSA-h95v-h523-3mw8	guzzlehttp/guzzle@7.9.2	7.15.1
Low	ALPINE-CVE-2026-76957	expat@2.6.4-r0	2.8.4-r0
Low	GHSA-wm3w-8rrp-j577	guzzlehttp/guzzle@7.9.2	7.15.1
Low	ALPINE-CVE-2026-56403	expat@2.6.4-r0	2.8.2-r0

Used by

1 chart

Chart	Version	Tag	Containers
bookstackgabe565Verified publisher	0.20.0	version-v24.12.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.