ghcr.io/linuxserver/openvpn-as:version-2.9.0-5c5bd120-ubuntu18 container image
GitHub Container RegistryScanned 26 Sept 2026
Deployed by 1 of 17,879 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/openvpn-as
ghcr.io/linuxserver/openvpn-as:version-2.9.0-5c5bd120-ubuntu18 resolved to 651e0d9174a2, scanned 26 Sept 2026: 800 findings, 7 critical, 1 on KEV; deployed by 1 chart, among them openvpn-as.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
800 distinct on this digest
Findings for digest 651e0d9174a2 as scanned on 26 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 26 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-56405 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56408 | expat | 2.2.5-3ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-56406 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-56407 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-56410 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-56411 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2025-4516 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm5 |
| Low | GHSA-3496-9g83-7v6x | sqlparse | 0.6.0 |
| Low | UBUNTU-CVE-2026-59894 | sqlparse | no fix listed |
| Low | UBUNTU-CVE-2026-72522 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | no fix listed |
| Low | UBUNTU-CVE-2025-52099 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2026-60747 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2020-21047 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-19542 | glibc | no fix listed |
| Low | UBUNTU-CVE-2021-20193 | tar | 1.29b-2ubuntu0.3 |
| Low | UBUNTU-CVE-2026-60183 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60331 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60332 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21998 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-22002 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-22004 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-22005 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-8058 | glibc | 2.27-3ubuntu1.6+esm6 |
| Low | UBUNTU-CVE-2025-29088 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2025-13837 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm8 |
| Low | UBUNTU-CVE-2026-56409 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | 0.23.9-2ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2017-18018 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-56132 | expat | 2.2.5-3ubuntu0.9+esm5 |
| Low | UBUNTU-CVE-2025-50103 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2024-21000 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-45582 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-11850 | krb5 | no fix listed |
| Low | UBUNTU-CVE-2024-11168 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm3 |
| Low | GHSA-27jp-wm6q-gp25 | sqlparse | 0.5.4 |
| Low | UBUNTU-CVE-2025-21546 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2013-4235 | shadow | 1:4.5-1ubuntu2.5 |
| Low | UBUNTU-CVE-2026-86805 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-0864 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2026-47012 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60177 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60182 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60184 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60185 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60186 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2026-60187 | mysql-5.7 | no fix listed |
| Low | UBUNTU-CVE-2025-8291 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm7 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| openvpn-ashenkiz | 0.0.2 | version-2.9.0-5c5bd120-ubuntu18 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.