ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu18 container image
GitHub Container RegistryScanned 15 Sept 2026
Deployed by 2 of 17,787 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/openvpn-as
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu18 resolved to 4ee0764310e7, scanned 15 Sept 2026: 1,038 findings, 12 critical, 1 on KEV; deployed by 2 charts, among them openvpn-as and open-vpn.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest 4ee0764310e7 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-60177 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60177 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60182 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60182 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60184 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60184 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60185 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60185 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60186 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60186 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60187 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60187 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-8291 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2025-14017 | curl | 7.58.0-2ubuntu3.24+esm7 |
| Low | UBUNTU-CVE-2026-35236 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35237 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35238 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35239 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35240 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60189 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-60189 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2024-10041 | pam | no fix listed |
| Low | UBUNTU-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2023-4641 | shadow | 1:4.5-1ubuntu2.5+esm1 |
| Low | UBUNTU-CVE-2024-21231 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-10158 | rsync | 3.1.2-2.1ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | 0.23.9-2ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2025-5278 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-22795 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| Low | UBUNTU-CVE-2024-21213 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-6075 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-18238 | libpcap | no fix listed |
| Low | UBUNTU-CVE-2012-2663 | iptables | no fix listed |
| Low | UBUNTU-CVE-2026-56412 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-3494 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-46936 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2026-46936 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60188 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60188 | mariadb-10.1 | no fix listed |
| Low | UBUNTU-CVE-2021-36086 | libsepol | 2.7-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-56131 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-50219 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-0864 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2025-21494 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | UBUNTU-CVE-2023-21963 | mysql-5.7 | 5.7.41-0ubuntu0.18.04.1 |
| Low | UBUNTU-CVE-2026-22015 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-41991 | gzip | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| openvpn-asstenicVerified publisher | 0.1.9 | version-2.8.6-916f8e7d-ubuntu18 | 1 |
| open-vpnopenvpn | 0.0.1 | version-2.8.6-916f8e7d-ubuntu18 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.