ghcr.io/linuxserver/openvpn-as:version-2.9.0-5c5bd120-ubuntu18 container image
GitHub Container RegistryScanned 26 Sept 2026
Deployed by 1 of 17,879 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/openvpn-as
ghcr.io/linuxserver/openvpn-as:version-2.9.0-5c5bd120-ubuntu18 resolved to 651e0d9174a2, scanned 26 Sept 2026: 800 findings, 7 critical, 1 on KEV; deployed by 1 chart, among them openvpn-as.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 651e0d9174a2 as scanned on 26 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 26 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-50087 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-8674 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.29b-2ubuntu0.4+esm4 |
| Low | UBUNTU-CVE-2024-21096 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35234 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35235 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35236 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35237 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35238 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35239 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-35240 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60145 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-3446 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2021-33294 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.26.1-6ubuntu0.7+esm4 |
| Low | UBUNTU-CVE-2025-6069 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm6 |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | 0.23.9-2ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-21964 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21929 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21936 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21937 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21941 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21948 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21952 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-56403 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56404 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56405 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56408 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56406 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-56407 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-56410 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-56411 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2025-4516 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm5 |
| Low | GHSA-3496-9g83-7v6x | sqlparse | 0.6.0 |
| Low | UBUNTU-CVE-2026-59894 | sqlparse | no fix listed |
| Low | UBUNTU-CVE-2026-72522 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | no fix listed |
| Low | UBUNTU-CVE-2025-52099 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2026-60747 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2020-21047 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-19542 | glibc | no fix listed |
| Low | UBUNTU-CVE-2021-20193 | tar | 1.29b-2ubuntu0.3 |
| Low | UBUNTU-CVE-2026-60183 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60331 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60332 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21998 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-22002 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-22004 | mysql-5.7 | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| openvpn-ashenkiz | 0.0.2 | version-2.9.0-5c5bd120-ubuntu18 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.