StackRadar

ghcr.io/linuxserver/davos:2.2.1-ls76 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/davos

ghcr.io/linuxserver/davos:2.2.1-ls76 resolved to 24ba55aeaa4f, scanned 20 Sept 2026: 204 findings, 17 critical, 9 on KEV; deployed by 1 chart, among them davos.

Radar Score

6,59217449647

204 findings on digest 24ba55aeaa4f · scanned 20 Sept 2026

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.2.1-ls76resolves to24ba55aeaa4f1 chartyesterday174496476,592

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

96 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 24ba55aeaa4f as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-f9xh-2qgp-cq57jackson-databind@2.8.42.9.10.8
MediumGHSA-m6x4-97wx-4q27jackson-databind@2.8.42.9.10.8
MediumGHSA-fqwf-pjwf-7vqvjackson-databind@2.8.42.9.10.4
MediumGHSA-qr7j-h6gg-jmgcjackson-databind@2.8.42.8.11.2
MediumGHSA-mx7p-6679-8g3qjackson-databind@2.8.42.8.11.5
MediumGHSA-r3gr-cxrf-hg25jackson-databind@2.8.42.9.10.8
MediumGHSA-gjmw-vf9h-g25vjackson-databind@2.8.42.8.11.5
MediumGHSA-h3cw-g4mq-c5x2jackson-databind@2.8.42.9.10.6
MediumGHSA-q446-82vq-w674jsch@0.1.500.1.54
MediumGHSA-2rvv-w9r2-rg7mtomcat-embed-core@8.5.68.5.60
MediumGHSA-85cw-hj65-qqv9jackson-databind@2.8.42.8.11.5
MediumGHSA-fmmc-742q-jg75jackson-databind@2.8.42.8.11.5
MediumGHSA-gwp4-hfv6-p7hwjackson-databind@2.8.42.8.11.4
MediumGHSA-9xcj-c8cr-8c3ctomcat-embed-core@8.5.68.5.50
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.8.42.8.11.5
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.8.42.9.10.8
MediumGHSA-5949-rw7g-wx7wjackson-databind@2.8.42.9.10.7
MediumGHSA-jx6h-3fjx-cgv5tomcat-embed-core@8.5.68.5.28
MediumGHSA-qjw2-hr98-qgfhjackson-databind@2.8.42.9.10.6
MediumGHSA-ffvq-7w96-97p7spring-core@4.3.4.RELEASE4.3.20.RELEASE
MediumGHSA-6wqp-v4v6-c87cjackson-databind@2.8.42.8.11.2
MediumGHSA-w3f4-3q6j-rh82jackson-databind@2.8.42.8.11.1
MediumGHSA-6rxj-58jh-436rtomcat-embed-core@8.5.68.5.28
MediumGHSA-jgwr-3qm3-26f3tomcat-embed-core@8.5.68.5.61
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.8.42.8.11.2
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.8.42.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.8.42.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.8.42.9.10.8
MediumGHSA-6pcc-3rfx-4gpmdom4j@1.6.12.0.3
MediumGHSA-89qr-369f-5m5xjackson-databind@2.8.42.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.8.42.9.10.8
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.8.42.9.10.8
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.8.42.9.10.8
MediumGHSA-vfqx-33qm-g869jackson-databind@2.8.42.9.10.8
MediumGHSA-2m8h-fgr8-2q9wspring-webmvc@4.3.4.RELEASE4.3.5
MediumGHSA-g5mm-vmx4-3rg7spring-context@4.3.4.RELEASE5.2.21.RELEASE
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.8.42.8.11.5
MediumGHSA-6v52-mj5r-7j2mtomcat-embed-core@8.5.68.5.32
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.8.42.8.11.4
MediumGHSA-ccgv-vj62-xf9hspring-web@4.3.4.RELEASEno fix listed
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.8.42.12.6.1
MediumGHSA-wm9w-rjj3-j356tomcat-embed-core@8.5.6no fix listed
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.8.42.9.10.4
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@8.5.69.0.118
MediumGHSA-q3mw-pvr8-9ggctomcat-embed-core@8.5.68.5.93
MediumGHSA-hgjh-9rj2-g67jspring-web@4.3.4.RELEASE5.3.33
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.24.5.13
MediumGHSA-ff77-26x5-69crtomcat-embed-core@8.5.6no fix listed
MediumGHSA-xmc8-26q4-qjhxjackson-dataformat-cbor@2.8.42.11.4
MediumGHSA-4487-x383-qpphspring-core@4.3.4.RELEASE4.3.15

Used by

1 chart
ChartVersionTagContainers
davosnicholaswildeVerified publisher1.0.02.2.1-ls761

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 20 Sept 2026 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.