StackRadar

ghcr.io/music-assistant/server:2.10.5 container image

GitHub Container Registry

Scanned 7 Oct 2026

Deployed by 1 of 18,035 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/music-assistant/server

ghcr.io/music-assistant/server:2.10.5 resolved to 28023f8c0d96, scanned 7 Oct 2026: 401 findings, 0 critical; deployed by 1 chart, among them music-assistant-server.

Radar Score

4,4320077323

401 findings on digest 28023f8c0d96 · scanned 7 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.10.5resolves to28023f8c0d961 chart2 days ago00773234,432

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

323 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 28023f8c0d96 as scanned on 7 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 7 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-102010gcc-14@14.2.0-19no fix listed
LowDEBIAN-CVE-2025-12781python3.13@3.13.5-2+deb13u4no fix listed
LowDEBIAN-CVE-2026-77117glibc@2.41-12+deb13u3no fix listed
LowDEBIAN-CVE-2026-80489glibc@2.41-12+deb13u3no fix listed
LowDEBIAN-CVE-2026-63388libevent@2.1.12-stable-10+b12.1.13-stable-1~deb13u1
LowDEBIAN-CVE-2026-88806libx11@2:1.8.12-1no fix listed
LowDEBIAN-CVE-2024-52615avahi@0.8-16no fix listed
LowDEBIAN-CVE-2025-15079curl@8.14.1-2+deb13u4no fix listed
LowDEBIAN-CVE-2026-24401avahi@0.8-16no fix listed
LowDEBIAN-CVE-2026-58470wget@1.25.0-2no fix listed
LowDEBIAN-CVE-2026-58055nghttp2@1.64.0-1.1+deb13u1no fix listed
LowDEBIAN-CVE-2026-86139libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowGO-2026-4603stdlib@go1.25.51.25.8
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.46.00.52.0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.46.00.52.0
LowGO-2026-4864stdlib@go1.25.51.25.9
LowDEBIAN-CVE-2025-15367python3.13@3.13.5-2+deb13u4no fix listed
LowGO-2026-4865stdlib@go1.25.51.25.9
LowGO-2026-4982stdlib@go1.25.51.25.10
LowGO-2026-5025golang.org/x/net@v0.48.00.55.0
LowDEBIAN-CVE-2026-86143libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-12505cifs-utils@2:7.4-1no fix listed
LowDEBIAN-CVE-2026-86140libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-86142libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-78410util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-89160pcre2@10.46-1~deb13u110.46-1~deb13u2
LowDEBIAN-CVE-2026-65705ffmpeg@7:7.1.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-4360python3.13@3.13.5-2+deb13u43.13.5-2+deb13u5
LowDEBIAN-CVE-2026-102633expat@2.8.3-1~deb13u1no fix listed
LowDEBIAN-CVE-2026-15588glib2.0@2.84.4-3~deb13u32.84.4-3~deb13u4
LowDEBIAN-CVE-2026-16461rpcbind@1.2.7-1no fix listed
LowDEBIAN-CVE-2022-0563util-linux@2.41.5-0+deb13u1no fix listed
LowGO-2026-6091stdlib@go1.25.51.25.13
LowDEBIAN-CVE-2026-11979libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-65704ffmpeg@7:7.1.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-89158pcre2@10.46-1~deb13u110.46-1~deb13u2
LowDEBIAN-CVE-2026-5704tar@1.35+dfsg-3.1no fix listed
LowDEBIAN-CVE-2026-94286libxtst@2:1.2.5-1no fix listed
LowDEBIAN-CVE-2026-56109alsa-lib@1.2.14-1no fix listed
LowDEBIAN-CVE-2026-86138libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-19487perl@5.40.1-65.40.1-6+deb13u1
LowGO-2026-4976stdlib@go1.25.51.25.10
LowGO-2026-5039stdlib@go1.25.51.25.11
LowDEBIAN-CVE-2026-96889librsvg@2.60.0+dfsg-1no fix listed
LowDEBIAN-CVE-2026-82522jpeg-xl@0.11.2-0.1~deb13u2no fix listed
LowDEBIAN-CVE-2026-89156pcre2@10.46-1~deb13u110.46-1~deb13u2
LowDEBIAN-CVE-2011-3374apt@3.0.3no fix listed
LowDEBIAN-CVE-2026-89161pcre2@10.46-1~deb13u110.46-1~deb13u2
LowDEBIAN-CVE-2013-4392systemd@257.13-1~deb13u1no fix listed
LowDEBIAN-CVE-2026-52584jpeg-xl@0.11.2-0.1~deb13u2no fix listed

Used by

1 chart
ChartVersionTagContainers
music-assistant-serverandibraeuVerified publisher2.1.32.10.51

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 7 Oct 2026 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.