ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu18 container image
GitHub Container RegistryScanned 15 Sept 2026
Deployed by 2 of 17,787 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/openvpn-as
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu18 resolved to 4ee0764310e7, scanned 15 Sept 2026: 1,038 findings, 12 critical, 1 on KEV; deployed by 2 charts, among them openvpn-as and open-vpn.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest 4ee0764310e7 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-53794 | rsync | no fix listed |
| Low | UBUNTU-CVE-2022-21592 | mysql-5.7 | 5.7.40-0ubuntu0.18.04.1 |
| Low | UBUNTU-CVE-2025-50097 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-50101 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-46836 | net-tools | no fix listed |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | no fix listed |
| Low | UBUNTU-CVE-2018-20482 | tar | 1.29b-2ubuntu0.2 |
| Low | UBUNTU-CVE-2024-11053 | curl | 7.58.0-2ubuntu3.24+esm10 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.4.47-2ubuntu0.18.04.1~esm1 |
| Low | UBUNTU-CVE-2026-29518 | rsync | 3.1.2-2.1ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-47052 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-47052 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-6019 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm15 |
| Low | UBUNTU-CVE-2026-60183 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60183 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60331 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60331 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60332 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60332 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-34318 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.29b-2ubuntu0.4+esm4 |
| Low | UBUNTU-CVE-2023-52968 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2024-21096 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2024-21096 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2025-50087 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-46869 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2021-33294 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-60145 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60145 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-18103 | isc-dhcp | no fix listed |
| Low | UBUNTU-CVE-2026-53798 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-60747 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60747 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-44171 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2025-6069 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-21929 | mysql-5.7 | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| openvpn-asstenicVerified publisher | 0.1.9 | version-2.8.6-916f8e7d-ubuntu18 | 1 |
| open-vpnopenvpn | 0.0.1 | version-2.8.6-916f8e7d-ubuntu18 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.