StackRadar

ghcr.io/mmontes11/iot-back:v3.11.0 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/mmontes11/iot-back

ghcr.io/mmontes11/iot-back:v3.11.0 resolved to 96683c54ae65, scanned 14 Sept 2026: 109 findings, 1 critical; deployed by 1 chart, among them iot.

Radar Score

2,134184654

109 findings on digest 96683c54ae65 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v3.11.0resolves to96683c54ae651 chart8 days ago1846542,134

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

109 distinct on this digest

Findings for digest 96683c54ae65 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
CriticalALPINE-CVE-2021-3711openssl@1.1.1k-r01.1.1l-r0
HighALPINE-CVE-2022-0778openssl@1.1.1k-r01.1.1n-r0
HighGHSA-c4w7-xm78-47vhy18n@4.0.04.0.1
HighALPINE-CVE-2018-25032zlib@1.2.11-r31.2.12-r0
HighALPINE-CVE-2021-3712openssl@1.1.1k-r01.1.1l-r0
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.12-r2
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumGHSA-vg7j-7cwx-8wgwmongoose@5.13.166.13.6
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-r628-mhmh-qjhwtar@4.4.134.4.15
MediumGHSA-m7xq-9374-9rvxmongoose@5.13.165.13.23
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumALPINE-CVE-2022-28391busybox@1.31.1-r191.31.1-r22
MediumGHSA-p6mc-m468-83gwlodash.set@4.3.2no fix listed
MediumGHSA-vx3p-948g-6vhqssri@6.0.16.0.2
MediumALPINE-CVE-2021-36159apk-tools@2.10.5-r12.10.7-r0
MediumGHSA-9r2w-394v-53qctar@4.4.134.4.16
MediumGHSA-93q8-gq69-wqmwansi-regex@4.1.04.1.1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.22.5.4
MediumGHSA-9m93-w8w6-76hhmongoose@5.13.165.13.20
MediumGHSA-c2qf-rxjj-qqgwsemver@5.7.15.7.2
MediumALPINE-CVE-2021-42380busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42379busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42381busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42385busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42378busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42382busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42384busybox@1.31.1-r191.31.1-r21
MediumALPINE-CVE-2021-42386busybox@1.31.1-r191.31.1-r21
MediumGHSA-qq89-hq3f-393ptar@4.4.134.4.18
MediumALPINE-CVE-2021-42383busybox@1.31.1-r191.31.1-r21
MediumGHSA-f8q6-p94x-37v3minimatch@3.0.43.0.5
MediumGHSA-35q2-47q7-3pc3redis@2.8.03.1.1
MediumGHSA-72xf-g2v4-qvf3tough-cookie@2.4.34.1.3
MediumGHSA-5955-9wpr-37jhtar@4.4.134.4.18
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@3.8.14.1.1
MediumGHSA-3h5v-q93c-6h6qws@6.2.26.2.3
MediumGHSA-43f8-2h32-f4cjhosted-git-info@2.8.82.8.9
MediumGHSA-6g6m-m6h5-w9gfexpress-jwt@5.3.36.0.0
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumGHSA-cqmj-92xf-r6r9socket.io-parser@3.4.23.4.3
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-3xgq-45jj-v275cross-spawn@5.1.06.0.6
MediumGHSA-pvrw-g6fx-mcx2is_js@0.9.0no fix listed

Used by

1 chart
ChartVersionTagContainers
iotmmontesVerified publisher0.3.2v3.11.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.