ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu18 container image

GitHub Container Registry

Scanned 15 Sept 2026

Deployed by 2 of 17,787 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/openvpn-as

ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu18 resolved to 4ee0764310e7, scanned 15 Sept 2026: 1,038 findings, 12 critical, 1 on KEV; deployed by 2 charts, among them openvpn-as and open-vpn.

Radar Score

15,6071232271723

1,038 findings on digest 4ee0764310e7 · scanned 15 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-2.8.6-916f8e7d-ubuntu18resolves to	4ee0764310e7	2 charts	6 days ago	1232271723	15,607

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

1,038 distinct on this digest

Findings for digest 4ee0764310e7 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	USN-4754-2	python2.7@2.7.17-1~18.04ubuntu1.2	2.7.17-1~18.04ubuntu1.5
Low	USN-4944-1	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	1:10.1.48-0ubuntu0.18.04.1
Low	USN-5089-1	ca-certificates@20201027ubuntu0.18.04.1	20210119~18.04.2
Low	USN-5473-1	ca-certificates@20201027ubuntu0.18.04.1	20211016~18.04.1
Low	USN-6105-1	ca-certificates@20201027ubuntu0.18.04.1	20230311ubuntu0.18.04.1
Low	USN-6663-1	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm5
Low	USN-7015-6	python2.7@2.7.17-1~18.04ubuntu1.2	2.7.17-1~18.04ubuntu1.13+esm8
Low	USN-7034-2	ca-certificates@20201027ubuntu0.18.04.1	202402031ubuntu0.18.04.1+esm1
Low	USN-7206-2	rsync@3.1.2-2.1ubuntu1.1	3.1.2-2.1ubuntu1.6+esm2
Low	USN-8119-2	systemd@237-3ubuntu10.42	237-3ubuntu10.57+esm3
Low	USN-8688-1	pam@1.1.8-3.6ubuntu2.18.04.2	1.1.8-3.6ubuntu2.18.04.6+esm2
Low	UBUNTU-CVE-2026-21965	mysql-5.7@5.7.32-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-13462	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-22001	mysql-5.7@5.7.32-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-61081	mysql-5.7@5.7.32-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-61081	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-66382	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-61096	mysql-5.7@5.7.32-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-61096	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-24515	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm3
Low	UBUNTU-CVE-2026-40228	systemd@237-3ubuntu10.42	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2023-4016	procps@2:3.3.12-3ubuntu1.2	2:3.3.12-3ubuntu1.2+esm1
Low	UBUNTU-CVE-2025-50100	mysql-5.7@5.7.32-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2025-30258	gnupg2@2.2.4-1ubuntu1.3	2.2.4-1ubuntu1.6+esm1
Low	UBUNTU-CVE-2026-15310	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-60190	mysql-5.7@5.7.32-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-60190	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	no fix listed
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.6-1	1:3.6-1ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-6879	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-18743	popt@1.16-11	no fix listed
Low	UBUNTU-CVE-2026-18739	popt@1.16-11	no fix listed
Low	UBUNTU-CVE-2026-18503	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-5958	sed@4.4-2	4.4-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-6368	glibc@2.27-3ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-18839	popt@1.16-11	no fix listed
Low	UBUNTU-CVE-2019-9619	systemd@237-3ubuntu10.42	no fix listed
Low	UBUNTU-CVE-2025-11961	libpcap@1.8.1-6ubuntu1.18.04.2	no fix listed

Used by

2 charts

Chart	Version	Tag	Containers
openvpn-asstenicVerified publisher	0.1.9	version-2.8.6-916f8e7d-ubuntu18	1
open-vpnopenvpn	0.0.1	version-2.8.6-916f8e7d-ubuntu18	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.