ghcr.io/linuxserver/wikijs:version-2.5.201 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/wikijs

ghcr.io/linuxserver/wikijs:version-2.5.201 resolved to 58d377933678, scanned 14 Sept 2026: 354 findings, 0 critical; deployed by 1 chart, among them wikijs.

Radar Score

5,946015141198

354 findings on digest 58d377933678 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-2.5.201resolves to	58d377933678	1 chart	8 days ago	015141198	5,946

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

141 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 58d377933678 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-hgjh-723h-mx2j	url-parse@1.5.1	1.5.8
Medium	ALPINE-CVE-2022-27775	curl@7.78.0-r0	7.79.1-r1
Medium	GHSA-jqv5-7xpx-qj74	sqlite3@5.0.2	5.1.5
Medium	GHSA-74fj-2j2h-c42q	follow-redirects@1.13.3	1.14.7
Medium	ALPINE-CVE-2022-27782	curl@7.78.0-r0	7.79.1-r2
Medium	GHSA-crh6-fp67-6883	xmldom@0.1.31	no fix listed
Medium	ALPINE-CVE-2022-40674	expat@2.2.10-r1	2.2.10-r7
Medium	GHSA-c2qf-rxjj-qqgw	semver@5.7.1	5.7.2
Medium	ALPINE-CVE-2022-27781	curl@7.78.0-r0	7.79.1-r2
Medium	GHSA-43fc-jf86-j433	axios@0.21.1	0.30.3
Medium	ALPINE-CVE-2021-42380	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2022-22576	curl@7.78.0-r0	7.79.1-r1
Medium	GHSA-r683-j2x4-v87g	node-fetch@1.7.3	2.6.7
Medium	GHSA-gx9m-whjm-85jf	dompurify@2.2.7	2.5.0
Medium	ALPINE-CVE-2022-27776	curl@7.78.0-r0	7.79.1-r1
Medium	ALPINE-CVE-2021-42379	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42381	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42385	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2022-43680	expat@2.2.10-r1	2.2.10-r8
Medium	ALPINE-CVE-2021-42378	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42382	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42384	busybox@1.32.1-r6	1.32.1-r7
Medium	ALPINE-CVE-2021-42386	busybox@1.32.1-r6	1.32.1-r7
Medium	GHSA-qq89-hq3f-393p	tar@4.4.13	4.4.18
Medium	GHSA-4rch-2fh8-94vw	mysql2@2.2.5	3.9.7
Medium	GHSA-q8pj-2vqx-8ggc	css-what@4.0.0	5.0.1
Medium	GHSA-265q-28rp-chq5	node-uuid@1.4.1	1.4.4
Medium	GHSA-pq67-2wwv-3xjx	tar-fs@2.1.1	2.1.2
Medium	GHSA-qpfw-4m9x-rxx8	@azure/ms-rest-nodeauth@2.0.2	3.0.8
Medium	GHSA-wf6x-7x77-mvgw	immutable@3.7.6	3.8.3
Medium	GHSA-rp65-9cf3-cjxr	nth-check@2.0.0	2.0.1
Medium	ALPINE-CVE-2022-25313	expat@2.2.10-r1	2.2.10-r4
Medium	GHSA-8v63-cqqc-6r2c	object-path@0.11.5	0.11.8
Medium	ALPINE-CVE-2021-41617	openssh@8.4_p1-r3	8.4_p1-r4
Medium	GHSA-9qrh-qjmc-5w2p	sqlite3@5.0.2	5.0.3
Medium	GHSA-p3vf-v8qc-cwcr	dompurify@2.2.7	2.4.2
Medium	ALPINE-CVE-2021-22959	nodejs@14.17.6-r0	14.18.1-r0
Medium	ALPINE-CVE-2021-42383	busybox@1.32.1-r6	1.32.1-r7
Medium	GHSA-rrc9-gqf8-8rwg	aws-sdk@2.778.0	2.814.0
Medium	GHSA-hffm-xvc3-vprc	simple-git@2.21.0	3.36.0
Medium	GHSA-f8q6-p94x-37v3	minimatch@3.0.4	3.0.5
Medium	GHSA-3xq5-wjfh-ppjc	luxon@1.25.0	1.28.1
Medium	ALPINE-CVE-2022-35256	nodejs@14.17.6-r0	14.20.1-r0
Medium	GHSA-72xf-g2v4-qvf3	tough-cookie@2.5.0	4.1.3
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1l-r0	1.1.1q-r0
Medium	GHSA-5955-9wpr-37jh	tar@2.2.2	4.4.18
Medium	GHSA-rc47-6667-2j5j	http-cache-semantics@3.8.1	4.1.1
Medium	ALPINE-CVE-2021-22960	nodejs@14.17.6-r0	14.18.1-r0
Medium	GHSA-grv7-fg5c-xmjg	braces@2.3.2	3.0.3
Medium	ALPINE-CVE-2021-22947	curl@7.78.0-r0	7.79.0-r0

Used by

1 chart

Chart	Version	Tag	Containers
wikijsgeek-cookbookVerified publisher	6.4.2	version-2.5.201	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.