ghcr.io/linuxserver/davos:2.2.1-ls76 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/davos

ghcr.io/linuxserver/davos:2.2.1-ls76 resolved to 24ba55aeaa4f, scanned 20 Sept 2026: 204 findings, 17 critical, 9 on KEV; deployed by 1 chart, among them davos.

Radar Score

6,59217449647

204 findings on digest 24ba55aeaa4f · scanned 20 Sept 2026

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.2.1-ls76resolves to	24ba55aeaa4f	1 chart	yesterday	17449647	6,592

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Critical findings

17 distinct on this digest

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

Findings for digest 24ba55aeaa4f as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.4.1	2.12.2
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.3.4.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.3.4.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@1.4.2.RELEASE	2.5.12
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.6	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.6	8.5.51
Critical	GHSA-fxph-q3j8-mv87	log4j-core@2.4.1	2.8.2
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.4.1	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.4.1	2.12.3
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.17	2.0
Critical	GHSA-xjgh-84hx-56c5KEV	tomcat-embed-core@8.5.6	8.5.23
Critical	GHSA-8vmx-qmch-mpqg	tomcat-embed-core@8.5.6	8.5.40
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.8.4	2.8.11
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.6	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.6	no fix listed
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@8.5.6	8.5.57
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.8.4	2.8.9

Used by

1 chart

Chart	Version	Tag	Containers
davosnicholaswildeVerified publisher	1.0.0	2.2.1-ls76	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.