ghcr.io/linuxserver/mstream:version-v5.2.5 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/mstream

ghcr.io/linuxserver/mstream:version-v5.2.5 resolved to 22c012bcc43c, scanned 20 Sept 2026: 344 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them mstream.

Radar Score

4,3790864272

344 findings on digest 22c012bcc43c · scanned 20 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v5.2.5resolves to	22c012bcc43c	1 chart	yesterday	0864272	4,379

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

344 distinct on this digest

Findings for digest 22c012bcc43c as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-j3p8-6mrq-6g7h	golang.org/x/image@v0.0.0-20201208152932-35266b937fa6	0.10.0
Low	GO-2022-0236	stdlib@go1.15.5	1.15.12
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.15	7.5.19
Low	GO-2021-0226	stdlib@go1.13.1	1.14.8
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.1	3.15.0
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.2	2.5.6
Low	GO-2021-0240	stdlib@go1.15.5	1.15.13
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GO-2021-0242	stdlib@go1.15.5	1.15.13
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.15	7.5.3
Low	GO-2021-0264	stdlib@go1.15.5	1.16.10
Low	GO-2022-0969	stdlib@go1.15.5	1.18.6
Low	GHSA-fvcv-3m26-pcqx	axios@0.21.1	0.31.0
Low	GHSA-jmr9-qjv8-65gv	extract-zip@1.7.0	no fix listed
Low	GO-2021-0239	stdlib@go1.15.5	1.15.13
Low	GO-2021-0347	stdlib@go1.15.5	1.16.15
Low	GO-2021-0245	stdlib@go1.15.5	1.15.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20201016220609-9e8e0b390897	0.52.0
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GO-2021-0319	stdlib@go1.15.5	1.16.14
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20201016220609-9e8e0b390897	0.52.0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297	0.13.0
Low	GO-2022-0493	stdlib@go1.15.5	1.17.10
Low	GO-2021-0224	stdlib@go1.13.1	1.13.13
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.15	7.5.18
Low	GO-2021-0317	stdlib@go1.15.5	1.16.14
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.14.1	1.15.4
Low	GHSA-rv95-896h-c2vc	express@4.17.1	4.19.2
Low	GO-2023-2185	stdlib@go1.15.5	1.20.11
Low	GHSA-r6q2-hw4h-h46w	tar@4.4.15	7.5.4
Low	GO-2021-0235	stdlib@go1.15.5	1.14.14
Low	GHSA-mhxj-85r3-2x55	file-type@16.5.3	16.5.4
Low	GO-2022-0229	stdlib@go1.13.1	1.12.16
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	GHSA-6chq-wfr3-2hj9	axios@0.21.1	0.31.1
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.1	3.15.2
Low	GHSA-r292-9mhp-454m	tar@4.4.15	7.5.21
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.14.1	1.16.0
Low	GO-2022-0537	stdlib@go1.15.5	1.17.13
Low	GO-2021-0234	stdlib@go1.15.5	1.15.9
Low	GHSA-v6c2-xwv6-8xf7	music-metadata@7.11.3	11.12.3
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20200615164410-66371956d46c	0.1.1
Low	GHSA-wf5p-g6vw-rhxx	axios@0.21.1	0.28.0
Low	GHSA-q675-qj96-32m9	golang.org/x/image@v0.0.0-20201208152932-35266b937fa6	0.41.0
Low	GHSA-7pqw-9j4j-h8q3	extract-zip@1.7.0	no fix listed
Low	GHSA-w5hq-g745-h8pq	uuid@3.4.0	11.1.1
Low	GO-2023-1703	stdlib@go1.15.5	1.19.8
Low	GO-2021-0241	stdlib@go1.15.5	1.15.13
Low	GO-2022-0521	stdlib@go1.15.5	1.17.12

Used by

1 chart

Chart	Version	Tag	Containers
mstreamnicholaswildeVerified publisher	2.1.2	version-v5.2.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.