StackRadar

ghcr.io/linuxserver/pixapop:v1.2-ls15 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/pixapop

ghcr.io/linuxserver/pixapop:v1.2-ls15 resolved to 605ebc091fa1, scanned 20 Sept 2026: 219 findings, 0 critical; deployed by 1 chart, among them pixapop.

Radar Score

3,4470681132

219 findings on digest 605ebc091fa1 · scanned 20 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.2-ls15resolves to605ebc091fa11 chartyesterday06811323,447

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

81 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 605ebc091fa1 as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-5955-9wpr-37jhtar@4.4.84.4.18
MediumGHSA-3wcq-x3mq-6r9pdns-packet@1.3.11.3.2
MediumGHSA-grv7-fg5c-xmjgbraces@2.3.23.0.3
MediumGHSA-jf5r-8hm2-f872url-parse@1.4.41.5.9
MediumGHSA-7p85-w9px-jpjptwig/twig@v2.6.23.26.0
MediumGHSA-43f8-2h32-f4cjhosted-git-info@2.7.12.8.9
MediumGHSA-hwj9-h5mp-3pm3postcss@7.0.147.0.36
MediumGHSA-6j75-5wfj-gh66twig/twig@v2.6.22.16.1
MediumGHSA-3rg7-wf37-54rmsymfony/http-foundation@v4.2.45.4.50
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-wr3j-pwj9-hqq6webpack-dev-middleware@3.6.15.3.4
MediumGHSA-f23m-r3pf-42rhlodash@4.17.114.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.114.17.23
MediumGHSA-5gfm-wpxj-wjgqnode-forge@0.7.51.3.2
MediumGHSA-257v-vj4p-3w2hcolor-string@1.5.31.5.5
MediumGHSA-x4jg-mjrx-434gnode-forge@0.7.51.3.0
MediumGHSA-c7qv-q95q-8v27http-proxy-middleware@0.19.12.0.7
MediumGHSA-8v38-pw62-9cw2url-parse@1.4.41.5.7
MediumGHSA-67hx-6x53-jw92@babel/traverse@7.3.47.23.2
MediumGHSA-hh27-ffr2-f2jcurl-parse@1.4.41.5.2
MediumGHSA-v88g-cgmw-v5xwajv@6.10.06.12.3
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-cpq7-6gpm-g9rccipher-base@1.0.41.0.5
MediumGHSA-r9p9-mrjm-926welliptic@6.4.16.5.4
MediumGHSA-566m-qj78-rww5postcss@6.0.237.0.36
MediumGHSA-3xgq-45jj-v275cross-spawn@5.1.06.0.6
MediumGHSA-w8qv-6jwh-64r5browserslist@4.4.24.16.5
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.43.1.3
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.18.31.20.3
MediumGHSA-vh95-rmgr-6w4mminimist@0.0.80.2.1

Used by

1 chart
ChartVersionTagContainers
pixapopnicholaswildeVerified publisher1.0.0v1.2-ls151

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 20 Sept 2026 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.