ghcr.io/liturgical-app/calendar-api:0.0.9 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/liturgical-app/calendar-api

ghcr.io/liturgical-app/calendar-api:0.0.9 resolved to 688a685e2bde, scanned 14 Sept 2026: 130 findings, 0 critical; deployed by 1 chart, among them calendar-api.

Radar Score

1,5560125104

130 findings on digest 688a685e2bde · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.0.9resolves to	688a685e2bde	1 chart	6 days ago	0125104	1,556

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

104 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 688a685e2bde as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	PYSEC-2026-237	aiohttp@3.12.15	3.14.1
Low	ALPINE-CVE-2026-76642	util-linux@2.41-r9	2.41.6-r0
Low	GHSA-mfx4-hv73-q22v	aiohttp@3.12.15	3.14.2
Low	GHSA-cq5v-8q36-5273	aiohttp@3.12.15	3.14.3
Low	GHSA-2vrm-gr82-f7m5	aiohttp@3.12.15	3.13.4
Low	ALPINE-CVE-2026-63074	openssl@3.5.1-r0	3.5.8-r0
Low	GHSA-mq44-7p77-q5h7	aiohttp@3.12.15	3.14.2
Low	GHSA-hg6j-4rv6-33pg	aiohttp@3.12.15	3.14.0
Low	GHSA-4xh5-x5gv-qwph	pip@25.0.1	25.3
Low	GHSA-mwh4-6h8g-pg8w	aiohttp@3.12.15	3.13.4
Low	GHSA-pwv6-vv43-88gr	pillow@11.3.0	12.2.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.1-r0	3.5.7-r0
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	GHSA-mqqc-3gqh-h2x8	aiohttp@3.12.15	3.13.3
Low	GHSA-fj7v-r99m-22gq	pillow@11.3.0	12.3.0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	ALPINE-CVE-2025-66199	openssl@3.5.1-r0	3.5.5-r0
Low	PYSEC-2026-3721	pip@25.0.1	26.2
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.12.15	3.13.3
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.12.15	3.14.1
Low	ALPINE-CVE-2026-22796	openssl@3.5.1-r0	3.5.5-r0
Low	GHSA-c427-h43c-vf67	aiohttp@3.12.15	3.13.4
Low	GHSA-87hc-h4r5-73f7	werkzeug@3.1.3	3.1.5
Low	PYSEC-2026-2104	aiohttp@3.12.15	3.14.0
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	GHSA-65pc-fj4g-8rjx	idna@3.10	3.15
Low	ALPINE-CVE-2026-42769	openssl@3.5.1-r0	3.5.7-r0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.12.15	3.13.4
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.5.0	2.7.0
Low	GHSA-6w46-j5rx-g56g	pytest@8.4.1	9.0.3
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.1-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2025-15469	openssl@3.5.1-r0	3.5.5-r0
Low	PYSEC-2026-2275	requests@2.32.5	2.33.0
Low	ALPINE-CVE-2026-42768	openssl@3.5.1-r0	3.5.7-r0
Low	PYSEC-2026-2151	flask@3.0.3	3.1.3
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	ALPINE-CVE-2026-22795	openssl@3.5.1-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.1-r0	3.5.7-r0
Low	GHSA-5xmw-vc9v-4wf2	pillow@11.3.0	12.2.0
Low	GHSA-r73j-pqj5-w3x7	pillow@11.3.0	12.2.0
Low	GHSA-jp4c-xjxw-mgf9	pip@25.0.1	26.1
Low	GHSA-wjx4-4jcj-g98j	pillow@11.3.0	12.2.0
Low	ALPINE-CVE-2025-68160	openssl@3.5.1-r0	3.5.5-r0
Low	GHSA-4x4j-2g7c-83w6	pillow@11.3.0	12.3.0
Low	GHSA-58qw-9mgm-455v	pip@25.0.1	26.1
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2025-69418	openssl@3.5.1-r0	3.5.5-r0

Used by

1 chart

Chart	Version	Tag	Containers
calendar-apiliturgical	0.1.5	0.0.9	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.