ghcr.io/linuxserver/mstream:version-v5.2.5 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/mstream

ghcr.io/linuxserver/mstream:version-v5.2.5 resolved to 22c012bcc43c, scanned 20 Sept 2026: 344 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them mstream.

Radar Score

4,3790864272

344 findings on digest 22c012bcc43c · scanned 20 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v5.2.5resolves to	22c012bcc43c	1 chart	yesterday	0864272	4,379

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

272 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 22c012bcc43c as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-qw6h-vgh9-j6wx	express@4.17.1	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	GO-2023-2041	stdlib@go1.15.5	1.20.8
Low	GHSA-7q8q-rj6j-mhjq	axios@0.21.1	0.33.0
Low	GO-2023-2043	stdlib@go1.15.5	1.20.8
Low	GO-2022-0515	stdlib@go1.15.5	1.17.12
Low	GO-2023-2186	stdlib@go1.15.5	1.20.11
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GO-2024-3333	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297	0.33.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@3.19.0	5.7.0
Low	GO-2024-3105	stdlib@go1.15.5	1.22.7
Low	GO-2022-1095	stdlib@go1.15.5	1.18.8
Low	GHSA-mwcw-c2x4-8c55	nanoid@3.1.24	3.3.8
Low	GO-2023-1621	stdlib@go1.15.5	1.19.7
Low	GO-2026-4981	stdlib@go1.15.5	1.25.10
Low	GO-2025-3563	stdlib@go1.15.5	1.23.8
Low	GHSA-vmf3-w455-68vh	tar@4.4.15	7.5.16
Low	GO-2026-4977	stdlib@go1.15.5	1.25.10
Low	GHSA-qgc7-mgm3-q253	golang.org/x/image@v0.0.0-20201208152932-35266b937fa6	0.5.0
Low	GO-2024-2610	stdlib@go1.15.5	1.21.8
Low	GO-2026-4986	stdlib@go1.15.5	1.25.10
Low	GO-2026-4918	stdlib@go1.15.5	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297	0.53.0
Low	GO-2026-4337	stdlib@go1.15.5	1.24.13
Low	GHSA-44p7-9xx4-hf2g	golang.org/x/image@v0.0.0-20201208152932-35266b937fa6	0.38.0
Low	GHSA-5c9x-8gcm-mpgx	axios@0.21.1	0.31.1
Low	GHSA-vf2m-468p-8v99	axios@0.21.1	0.31.1
Low	GHSA-5v7r-6r5c-r473	file-type@16.5.3	21.3.1
Low	GO-2026-4601	stdlib@go1.15.5	1.25.8
Low	GO-2026-5026	stdlib@go1.15.5	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297	0.55.0
Low	GO-2026-4342	stdlib@go1.15.5	1.24.12
Low	GO-2025-3420	stdlib@go1.15.5	1.22.11
Low	GO-2024-2598	stdlib@go1.15.5	1.21.8
Low	GO-2025-3751	stdlib@go1.15.5	1.23.10
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@3.14.1	3.15.1
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20201016220609-9e8e0b390897	0.0.0-20220525230936-793ad666bf5e
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20201016220609-9e8e0b390897	0.43.0
Low	GO-2026-4870	stdlib@go1.15.5	1.25.9
Low	GO-2022-0532	stdlib@go1.15.5	1.17.11
Low	GHSA-ghr5-ch3p-vcr6	ejs@3.1.6	3.1.10
Low	GO-2025-4009	stdlib@go1.15.5	1.24.8
Low	GO-2026-4947	stdlib@go1.15.5	1.25.9
Low	GO-2026-5061	golang.org/x/image@v0.0.0-20201208152932-35266b937fa6	0.43.0
Low	GO-2026-5062	golang.org/x/image@v0.0.0-20201208152932-35266b937fa6	0.43.0
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.2	6.16.0
Low	GO-2025-4006	stdlib@go1.15.5	1.24.8
Low	GO-2026-5037	stdlib@go1.15.5	1.25.11
Low	GO-2026-4971	stdlib@go1.15.5	1.25.10

Used by

1 chart

Chart	Version	Tag	Containers
mstreamnicholaswildeVerified publisher	2.1.2	version-v5.2.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.