ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 4 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/loft-sh/vcluster-pro

ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10 resolved to ab2e1fa19dd4, scanned 14 Sept 2026: 233 findings, 0 critical, 1 on KEV; deployed by 4 charts, among them vcluster-pro, vcluster-pro-eks and vcluster-pro-k0s.

Radar Score

2,6320635192

233 findings on digest ab2e1fa19dd4 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.0.0-ci-run.10resolves to	ab2e1fa19dd4	4 charts	7 days ago	0635192	2,632

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

192 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ab2e1fa19dd4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2025-4013	stdlib@go1.18.10	1.24.8
Low	GO-2025-3849	stdlib@go1.18.10	1.23.12
Low	GO-2026-4946	stdlib@go1.18.10	1.25.9
Low	GO-2026-5064	github.com/containerd/containerd@v1.6.15	no fix listed
Low	GHSA-hr2v-4r36-88hr	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.20.2
Low	GO-2025-3887	helm@3.11.0	no fix listed
Low	GO-2025-3888	helm@3.11.0	no fix listed
Low	GO-2026-4603	stdlib@go1.18.10	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.5.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.5.0	0.56.0
Low	GO-2026-4982	stdlib@go1.18.10	1.25.10
Low	GO-2026-6091	stdlib@go1.18.10	1.25.13
Low	GO-2026-5338	github.com/containerd/containerd@v1.6.15	no fix listed
Low	GO-2026-6180	golang.org/x/mod@v0.10.0	0.40.0
Low	GO-2025-3750	stdlib@go1.18.10	1.23.10
Low	GO-2026-4864	stdlib@go1.18.10	1.25.9
Low	GO-2025-3447	stdlib@go1.18.10	1.22.12
Low	GO-2026-4865	stdlib@go1.18.10	1.25.9
Low	GO-2026-4869	stdlib@go1.18.10	1.25.9
Low	GO-2026-4340	stdlib@go1.18.10	1.24.12
Low	GO-2025-4175	stdlib@go1.18.10	1.24.11
Low	GHSA-6xv5-86q9-7xr8	github.com/cyphar/filepath-securejoin@v0.2.3	0.2.4
Low	GHSA-7ww5-4wqc-m92c	github.com/containerd/containerd@v1.6.15	1.6.26
Low	GHSA-jq35-85cj-fj4p	github.com/docker/docker@v20.10.21+incompatible	20.10.27
Low	GO-2026-4403	stdlib@go1.18.10	1.23.9
Low	GO-2026-5025	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-4970	stdlib@go1.18.10	1.25.12
Low	GO-2026-5027	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-4602	stdlib@go1.18.10	1.25.8
Low	GO-2026-5622	github.com/containerd/containerd@v1.6.15	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.9.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.10.0	0.40.0
Low	GO-2023-2048	github.com/cyphar/filepath-securejoin@v0.2.3	0.2.4
Low	GO-2023-2153	google.golang.org/grpc@v1.55.0	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.6.15	1.6.26
Low	GO-2026-5932	golang.org/x/crypto@v0.5.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.55.0	1.82.1
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v20.10.21+incompatible	25.0.13
Low	GHSA-xf85-363p-868w	oras.land/oras-go@v1.2.2	no fix listed

Used by

4 charts

Chart	Version	Tag	Containers
vcluster-proloftVerified publisher	0.0.0-ci-run.10	0.0.0-ci-run.10	1
vcluster-pro-eksloftVerified publisher	0.0.0-ci-run.10	0.0.0-ci-run.10	2
vcluster-pro-k0sloftVerified publisher	0.0.0-ci-run.10	0.0.0-ci-run.10	1
vcluster-pro-k8sloftVerified publisher	0.0.0-ci-run.10	0.0.0-ci-run.10	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.