StackRadar

ghcr.io/linuxserver/calibre-web:latest container image

GitHub Container Registry

Scanned 19 Sept 2026

Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/calibre-web

ghcr.io/linuxserver/calibre-web:latest resolved to 0767226fcf20, scanned 19 Sept 2026: 469 findings, 0 critical; deployed by 1 chart, among them opds-shelf.

Radar Score

3,9310029440

469 findings on digest 0767226fcf20 · scanned 19 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to0767226fcf201 charttoday00294403,931

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

469 distinct on this digest

Findings for digest 0767226fcf20 as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGO-2024-2888stdlib@go1.17.81.21.11
LowUBUNTU-CVE-2026-28692imagemagick@8:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10
LowGO-2025-4008stdlib@go1.17.81.24.8
LowGO-2025-4010stdlib@go1.17.81.24.8
LowUBUNTU-CVE-2026-25966imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2024-10041pam@1.5.3-5ubuntu5.7no fix listed
LowGO-2023-1840stdlib@go1.17.81.19.10
LowUBUNTU-CVE-2026-28689imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-53465imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-40612jq@1.7.1-3ubuntu0.24.04.2no fix listed
LowUBUNTU-CVE-2026-44777jq@1.7.1-3ubuntu0.24.04.2no fix listed
LowUBUNTU-CVE-2026-76781libxml2@2.9.14+dfsg-1.3ubuntu3.8no fix listed
LowUBUNTU-CVE-2026-18495tiff@4.5.1+git230720-4ubuntu2.5no fix listed
LowGO-2025-4014stdlib@go1.17.81.24.8
LowUBUNTU-CVE-2026-41256jq@1.7.1-3ubuntu0.24.04.2no fix listed
LowUBUNTU-CVE-2026-87875cups@2.4.7-1.2ubuntu7.14no fix listed
LowGO-2025-3503stdlib@go1.17.81.23.7
LowGO-2026-4976stdlib@go1.17.81.25.10
LowUBUNTU-CVE-2025-53019imagemagick@8:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
LowUBUNTU-CVE-2026-55510imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-55597imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-47770jq@1.7.1-3ubuntu0.24.04.2no fix listed
LowGO-2026-5856stdlib@go1.17.81.25.12
LowGO-2025-4007stdlib@go1.17.81.24.9
LowUBUNTU-CVE-2026-25576imagemagick@8:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9
LowUBUNTU-CVE-2026-33902imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowGO-2026-4980stdlib@go1.17.81.25.10
LowGO-2026-5039stdlib@go1.17.81.25.11
LowUBUNTU-CVE-2026-41257jq@1.7.1-3ubuntu0.24.04.2no fix listed
LowGO-2025-3849stdlib@go1.17.81.23.12
LowGHSA-m959-cc7f-wv43cryptography@43.0.346.0.6
LowGO-2025-4013stdlib@go1.17.81.24.8
LowUBUNTU-CVE-2026-30883imagemagick@8:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8
LowGO-2026-4946stdlib@go1.17.81.25.9
LowUBUNTU-CVE-2026-45359imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-86421imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowGHSA-5hgr-hg42-57jgpypdf@6.10.26.12.2
LowUBUNTU-CVE-2026-54370acl@2.3.2-1build1.1no fix listed
LowUBUNTU-CVE-2026-42050imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-50219expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-56367imagemagick@8:6.9.12.98+dfsg1-5.2build2no fix listed
LowUBUNTU-CVE-2026-56412expat@2.6.1-2ubuntu0.4no fix listed
LowGO-2026-4603stdlib@go1.17.81.25.8
LowUBUNTU-CVE-2026-0864python3.12@3.12.3-1ubuntu0.17no fix listed
LowUBUNTU-CVE-2026-56131expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-6357python-pip@24.0+dfsg-1ubuntu1.3no fix listed
LowGHSA-79v4-65xg-pq4gcryptography@43.0.344.0.1
LowGO-2025-3750stdlib@go1.17.81.23.10
LowGO-2026-4982stdlib@go1.17.81.25.10
LowGO-2026-6091stdlib@go1.17.81.25.13

Used by

1 chart
ChartVersionTagContainers
opds-shelfopds-shelfVerified publisher0.4.0latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 19 Sept 2026 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.