ghcr.io/linuxserver/duplicati:latest container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/duplicati

ghcr.io/linuxserver/duplicati:latest resolved to a792931146b4, scanned 14 Sept 2026: 191 findings, 0 critical; deployed by 1 chart, among them duplicati.

Radar Score

1,7160018173

191 findings on digest a792931146b4 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	a792931146b4	1 chart	8 days ago	0018173	1,716

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

173 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest a792931146b4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2026-5038	stdlib@go1.24.9	1.25.11
Low	UBUNTU-CVE-2026-86139	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-56132	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-15588	glib2.0@2.80.0-6ubuntu3.8	no fix listed
Low	GO-2026-6218	stdlib@go1.24.9	1.25.13
Low	UBUNTU-CVE-2026-15534	perl@5.38.2-3.2ubuntu0.4	no fix listed
Low	GO-2025-4155	stdlib@go1.24.9	1.24.11
Low	UBUNTU-CVE-2026-86144	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-56288	patch@2.7.6-7build3	no fix listed
Low	UBUNTU-CVE-2026-56289	patch@2.7.6-7build3	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.5.3-5ubuntu5.7	no fix listed
Low	UBUNTU-CVE-2026-40612	jq@1.7.1-3ubuntu0.24.04.2	no fix listed
Low	UBUNTU-CVE-2026-44777	jq@1.7.1-3ubuntu0.24.04.2	no fix listed
Low	UBUNTU-CVE-2026-41256	jq@1.7.1-3ubuntu0.24.04.2	no fix listed
Low	GO-2026-4976	stdlib@go1.24.9	1.25.10
Low	UBUNTU-CVE-2026-47770	jq@1.7.1-3ubuntu0.24.04.2	no fix listed
Low	GO-2026-5856	stdlib@go1.24.9	1.25.12
Low	GO-2026-6355	golang.org/x/crypto@v0.19.0	0.56.0
Low	GO-2026-4980	stdlib@go1.24.9	1.25.10
Low	GO-2026-5039	stdlib@go1.24.9	1.25.11
Low	UBUNTU-CVE-2026-41257	jq@1.7.1-3ubuntu0.24.04.2	no fix listed
Low	GO-2026-4946	stdlib@go1.24.9	1.25.9
Low	UBUNTU-CVE-2026-54370	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.6.1-2ubuntu0.4	no fix listed
Low	GO-2026-4603	stdlib@go1.24.9	1.25.8
Low	UBUNTU-CVE-2026-0864	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.19.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.19.0	0.56.0
Low	GO-2026-4982	stdlib@go1.24.9	1.25.10
Low	GO-2026-6091	stdlib@go1.24.9	1.25.13
Low	UBUNTU-CVE-2024-56433	shadow@1:4.13+dfsg1-4ubuntu3.2	no fix listed
Low	UBUNTU-CVE-2026-5419	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-4864	stdlib@go1.24.9	1.25.9
Low	GO-2026-4865	stdlib@go1.24.9	1.25.9
Low	GO-2026-4869	stdlib@go1.24.9	1.25.9
Low	GO-2026-4340	stdlib@go1.24.9	1.24.12
Low	GO-2025-4175	stdlib@go1.24.9	1.24.11
Low	UBUNTU-CVE-2026-18374	glibc@2.39-0ubuntu8.8	no fix listed
Low	UBUNTU-CVE-2026-54679	jq@1.7.1-3ubuntu0.24.04.2	no fix listed
Low	UBUNTU-CVE-2026-86469	glib2.0@2.80.0-6ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-19499	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-19542	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-77117	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-80489	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	GO-2026-4970	stdlib@go1.24.9	1.25.12
Low	UBUNTU-CVE-2026-32777	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.45.1-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2026-43895	jq@1.7.1-3ubuntu0.24.04.2	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
duplicatigeek-cookbookVerified publisher	5.4.2	latest	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.