ghcr.io/linuxserver/clarkson:version-v1.1.2 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/clarkson

ghcr.io/linuxserver/clarkson:version-v1.1.2 resolved to 1aa4cce28728, scanned 20 Sept 2026: 36 findings, 0 critical; deployed by 1 chart, among them clarkson.

Radar Score

556011421

36 findings on digest 1aa4cce28728 · scanned 20 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v1.1.2resolves to	1aa4cce28728	1 chart	yesterday	011421	556

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

36 distinct on this digest

Findings for digest 1aa4cce28728 as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
Medium	GHSA-hrpp-h998-j3pp	qs@6.5.2	6.5.3
Medium	GHSA-8hfj-j24r-96c4	moment@2.29.1	2.29.2
Medium	GHSA-24rp-q3w6-vc56	postgresql@9.4.1208.jre6	42.2.28
Medium	GHSA-wc69-rhjr-hc9g	moment@2.29.1	2.29.4
Medium	GHSA-p6mc-m468-83gw	lodash.set@4.3.2	no fix listed
Medium	GHSA-6phf-6h5g-97j2	sqlite-jdbc@3.7.15-M1	3.41.2.2
Medium	GHSA-v7wg-cpwc-24m4	postgresql@9.4.1208.jre6	42.2.25
Medium	GHSA-r38f-c4h4-hqq2	postgresql@9.4.1208.jre6	42.2.26
Medium	GHSA-f23m-r3pf-42rh	lodash@4.17.21	4.18.0
Medium	GHSA-xxjr-mmjv-4gpg	lodash@4.17.21	4.17.23
Medium	GHSA-6g6m-m6h5-w9gf	express-jwt@5.3.3	6.0.0
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.7	0.1.13
Medium	GHSA-9wv6-86v2-598j	path-to-regexp@0.1.7	0.1.10
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.18.3	1.20.3
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-8cf7-32gw-wr33	jsonwebtoken@8.1.1	9.0.0
Low	GHSA-rv95-896h-c2vc	express@4.16.4	4.19.2
Low	GHSA-qwph-4952-7xr6	jsonwebtoken@8.1.1	9.0.0
Low	GHSA-hjrf-2m68-5959	jsonwebtoken@8.1.1	9.0.0
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	GHSA-cm22-4g7w-348p	serve-static@1.13.2	1.16.0
Low	GHSA-xvr9-35cr-46v9	mariadb-java-client@1.4.5	2.7.14
Low	GHSA-m6fv-jmcg-4jfg	send@0.16.2	0.19.0
Low	GHSA-qw6h-vgh9-j6wx	express@4.16.4	4.20.0
Low	GHSA-4vj7-5mj6-jm8m	morgan@1.9.1	1.11.0
Low	GHSA-g9jj-cgmh-9f38	mariadb-java-client@1.4.5	2.7.14
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@1.4.5	2.7.14
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.2	6.16.0
Low	GHSA-jxfw-x594-9x9m	morgan@1.9.1	1.12.0
Low	GHSA-c3m8-x3cg-qm2c	helmet-csp@2.6.0	2.9.1
Low	GHSA-6rw7-vpxm-498p	qs@6.5.2	6.14.1
Low	GHSA-v422-hmwv-36x6	body-parser@1.18.3	1.20.6
Low	GHSA-wxmm-q36w-r9xj	mariadb-java-client@1.4.5	2.7.14
Low	GHSA-76c9-3jph-rj3q	on-headers@1.0.2	1.1.0
Low	GHSA-pxg6-pf52-xh8x	cookie@0.3.1	0.7.0

Used by

1 chart

Chart	Version	Tag	Containers
clarksonnicholaswildeVerified publisher	0.2.3	version-v1.1.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.