ghcr.io/linuxserver/openvpn-as:version-2.9.0-5c5bd120-ubuntu18 container image
GitHub Container RegistryScanned 26 Sept 2026
Deployed by 1 of 17,879 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/openvpn-as
ghcr.io/linuxserver/openvpn-as:version-2.9.0-5c5bd120-ubuntu18 resolved to 651e0d9174a2, scanned 26 Sept 2026: 800 findings, 7 critical, 1 on KEV; deployed by 1 chart, among them openvpn-as.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 651e0d9174a2 as scanned on 26 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 26 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-42250 | bzip2 | 1.0.6-8.1ubuntu0.2+esm1 |
| Low | UBUNTU-CVE-2025-21494 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | UBUNTU-CVE-2026-89092 | glibc | no fix listed |
| Low | UBUNTU-CVE-2023-21963 | mysql-5.7 | 5.7.41-0ubuntu0.18.04.1 |
| Low | UBUNTU-CVE-2026-22015 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-68160 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| Low | UBUNTU-CVE-2026-18313 | libpcap | no fix listed |
| Low | UBUNTU-CVE-2026-34317 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-34319 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2021-36084 | libsepol | 2.7-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-76957 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-53613 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-53615 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2021-36085 | libsepol | 2.7-1ubuntu0.1 |
| Low | UBUNTU-CVE-2021-36087 | libsepol | 2.7-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-50219 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56412 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2025-50096 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2023-29383 | shadow | no fix listed |
| Low | UBUNTU-CVE-2026-56131 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2025-30681 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-41991 | gzip | 1.6-5ubuntu1.2+esm1 |
| Low | UBUNTU-CVE-2025-15224 | curl | 7.58.0-2ubuntu3.24+esm7 |
| Low | UBUNTU-CVE-2025-9820 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2025-30721 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-45186 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-27456 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-39113 | sqlite3 | 3.22.0-1ubuntu0.7+esm3 |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-57179 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2026-32777 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2025-30703 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-41080 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-32776 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-60191 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-57177 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2025-50098 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-50104 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-69418 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| Low | UBUNTU-CVE-2025-1795 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm5 |
| Low | UBUNTU-CVE-2025-50081 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2024-21237 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-6141 | ncurses | 6.1-1ubuntu1.18.04.1+esm4 |
| Low | UBUNTU-CVE-2026-21965 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | USN-5089-1 | ca-certificates | 20210119~18.04.2 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| openvpn-ashenkiz | 0.0.2 | version-2.9.0-5c5bd120-ubuntu18 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.