ghcr.io/linuxserver/wikijs:version-2.5.201 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/wikijs
ghcr.io/linuxserver/wikijs:version-2.5.201 resolved to 58d377933678, scanned 14 Sept 2026: 354 findings, 0 critical; deployed by 1 chart, among them wikijs.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 58d377933678 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-f98w-7cxr-ff2h | katex | 0.16.10 |
| Low | ALPINE-CVE-2022-35252 | curl | 7.79.1-r3 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-m7pr-hjqh-92cm | axios | 0.31.1 |
| Low | GHSA-hjrf-2m68-5959 | jsonwebtoken | 9.0.0 |
| Low | ALPINE-CVE-2021-42374 | busybox | 1.32.1-r7 |
| Low | GHSA-49q7-c7j4-3p7m | elliptic | 6.5.7 |
| Low | GHSA-hpcv-96wg-7vj8 | dompurify | 3.4.6 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-869p-cjfg-cm3x | jws | 3.2.3 |
| Low | GHSA-6gmq-8vp8-gcm6 | xmldom | no fix listed |
| Low | GHSA-mmx7-hfxf-jppx | axios | 0.33.0 |
| Low | GHSA-vvjj-xcjg-gr5g | nodemailer | 8.0.5 |
| Low | MAL-2022-4691 | monorepo-symlink-test | no fix listed |
| Low | GHSA-r47g-fvhr-h676 | dompurify | 3.4.6 |
| Low | GHSA-65ch-62r8-g69g | node-forge | 1.3.2 |
| Low | GHSA-cm22-4g7w-348p | serve-static | 1.16.0 |
| Low | GHSA-crv5-9vww-q3g8 | dompurify | 3.4.0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-434g-2637-qmqr | elliptic | 6.5.6 |
| Low | GHSA-qrpm-p2h7-hrv2 | nanoid | 3.1.31 |
| Low | GHSA-vjh7-7g9h-fjfh | elliptic | 6.6.1 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GHSA-378v-28hj-76wf | bn.js | 4.12.3 |
| Low | GHSA-977x-g7h5-7qgw | elliptic | 6.5.7 |
| Low | GHSA-h8r8-wccr-v5f2 | dompurify | 3.3.2 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | GHSA-m6fv-jmcg-4jfg | send | 0.19.0 |
| Low | GHSA-h7mw-gpvr-xq4m | dompurify | 3.4.0 |
| Low | GHSA-w9j2-pvgh-6h63 | axios | 0.31.1 |
| Low | ALPINE-CVE-2021-42375 | busybox | 1.32.1-r7 |
| Low | GHSA-3wc5-fcw2-2329 | katex | 0.16.10 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-fc9h-whq2-v747 | elliptic | 6.6.0 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-qw6h-vgh9-j6wx | express | 4.20.0 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 3.14.2 |
| Low | GHSA-7q8q-rj6j-mhjq | axios | 0.33.0 |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 3.15.0 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | GHSA-3f6p-5ww8-9rcr | mysql2 | 3.22.0 |
| Low | GHSA-vhxf-7vqr-mrjg | dompurify | 3.2.4 |
| Low | GHSA-qxg5-2qff-p49r | striptags | 3.2.0 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GHSA-76mc-f452-cxcm | dompurify | 3.4.7 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-5c9x-8gcm-mpgx | axios | 0.31.1 |
| Low | GHSA-vf2m-468p-8v99 | axios | 0.31.1 |
| Low | GHSA-39q2-94rc-95cp | dompurify | 3.4.0 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| wikijsgeek-cookbookVerified publisher | 6.4.2 | version-2.5.201 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.