ghcr.io/linuxserver/wikijs:version-2.5.201 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/wikijs

ghcr.io/linuxserver/wikijs:version-2.5.201 resolved to 58d377933678, scanned 14 Sept 2026: 354 findings, 0 critical; deployed by 1 chart, among them wikijs.

Radar Score

5,946015141198

354 findings on digest 58d377933678 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-2.5.201resolves to	58d377933678	1 chart	8 days ago	015141198	5,946

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

354 distinct on this digest

Findings for digest 58d377933678 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-72gw-mp4g-v24j	multer@1.4.2	2.2.0
Low	GHSA-v923-w3x8-wh69	passport@0.3.2	0.6.0
Low	GHSA-6h8r-xr42-gp59	xmldom@0.1.31	no fix listed
Low	GHSA-h6q6-9hqw-rwfv	xmldom@0.1.31	0.5.0
Low	GHSA-cg87-wmx4-v546	katex@0.12.0	0.16.21
Low	GHSA-83g3-92jg-28cx	tar@4.4.19	7.5.8
Low	GHSA-f98w-7cxr-ff2h	katex@0.12.0	0.16.10
Low	ALPINE-CVE-2022-35252	curl@7.78.0-r0	7.79.1-r3
Low	GHSA-w8wr-v893-vjvp	tar@4.4.19	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@0.21.1	0.31.1
Low	GHSA-hjrf-2m68-5959	jsonwebtoken@8.5.1	9.0.0
Low	ALPINE-CVE-2021-42374	busybox@1.32.1-r6	1.32.1-r7
Low	GHSA-49q7-c7j4-3p7m	elliptic@6.5.4	6.5.7
Low	GHSA-hpcv-96wg-7vj8	dompurify@2.2.7	3.4.6
Low	GHSA-p6gq-j5cr-w38f	nodemailer@6.4.14	9.0.1
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	GHSA-6gmq-8vp8-gcm6	xmldom@0.1.31	no fix listed
Low	GHSA-mmx7-hfxf-jppx	axios@0.21.1	0.33.0
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@6.4.14	8.0.5
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	GHSA-r47g-fvhr-h676	dompurify@2.2.7	3.4.6
Low	GHSA-65ch-62r8-g69g	node-forge@0.10.0	1.3.2
Low	GHSA-cm22-4g7w-348p	serve-static@1.14.1	1.16.0
Low	GHSA-crv5-9vww-q3g8	dompurify@2.2.7	3.4.0
Low	GHSA-gvwx-54wh-qm9j	tar@4.4.19	7.5.17
Low	GHSA-434g-2637-qmqr	elliptic@6.5.4	6.5.6
Low	GHSA-qrpm-p2h7-hrv2	nanoid@3.1.22	3.1.31
Low	GHSA-vjh7-7g9h-fjfh	elliptic@6.5.4	6.6.1
Low	GHSA-v2v4-37r5-5v8g	ip-address@5.9.4	10.1.1
Low	GHSA-378v-28hj-76wf	bn.js@4.12.0	4.12.3
Low	GHSA-977x-g7h5-7qgw	elliptic@6.5.4	6.5.7
Low	GHSA-h8r8-wccr-v5f2	dompurify@2.2.7	3.3.2
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.1.22	3.3.16
Low	GHSA-m6fv-jmcg-4jfg	send@0.17.1	0.19.0
Low	GHSA-h7mw-gpvr-xq4m	dompurify@2.2.7	3.4.0
Low	GHSA-w9j2-pvgh-6h63	axios@0.21.1	0.31.1
Low	ALPINE-CVE-2021-42375	busybox@1.32.1-r6	1.32.1-r7
Low	GHSA-3wc5-fcw2-2329	katex@0.12.0	0.16.10
Low	GHSA-2v37-7h3g-55p8	nanoid@3.1.22	3.3.18
Low	GHSA-fc9h-whq2-v747	elliptic@6.5.4	6.6.0
Low	GHSA-3v7f-55p6-f55p	picomatch@2.2.2	2.3.2
Low	GHSA-qw6h-vgh9-j6wx	express@4.17.1	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.13.1	3.14.2
Low	GHSA-7q8q-rj6j-mhjq	axios@0.21.1	0.33.0
Low	GHSA-h67p-54hq-rp68	js-yaml@3.13.1	3.15.0
Low	GHSA-6v5v-wf23-fmfq	markdown-it@11.0.1	14.2.0
Low	GHSA-3f6p-5ww8-9rcr	mysql2@2.2.5	3.22.0
Low	GHSA-vhxf-7vqr-mrjg	dompurify@2.2.7	3.2.4
Low	GHSA-qxg5-2qff-p49r	striptags@3.1.1	3.2.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16

Used by

1 chart

Chart	Version	Tag	Containers
wikijsgeek-cookbookVerified publisher	6.4.2	version-2.5.201	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.