ghcr.io/music-assistant/server:2.10.5 container image

GitHub Container Registry

Scanned 5 Oct 2026

Deployed by 1 of 18,026 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/music-assistant/server

ghcr.io/music-assistant/server:2.10.5 resolved to 28023f8c0d96, scanned 5 Oct 2026: 400 findings, 0 critical; deployed by 1 chart, among them music-assistant-server.

Radar Score

4,4260077322

400 findings on digest 28023f8c0d96 · scanned 5 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.10.5resolves to	28023f8c0d96	1 chart	yesterday	0077322	4,426

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

400 distinct on this digest

Findings for digest 28023f8c0d96 as scanned on 5 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 5 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-58012	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u4
Medium	DEBIAN-CVE-2026-58013	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u4
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.46.0	0.52.0
Medium	DEBIAN-CVE-2026-58014	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u4
Medium	DEBIAN-CVE-2026-66033	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Medium	DEBIAN-CVE-2026-8376	perl@5.40.1-6	5.40.1-6+deb13u1
Medium	DEBIAN-CVE-2021-36691	jpeg-xl@0.11.2-0.1~deb13u2	no fix listed
Medium	DEBIAN-CVE-2026-18924	curl@8.14.1-2+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-63385	libevent@2.1.12-stable-10+b1	2.1.13-stable-1~deb13u1
Medium	DEBIAN-CVE-2026-64830	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2018-18064	cairo@1.18.4-1+b1	no fix listed
Medium	DEBIAN-CVE-2025-29070	lcms2@2.16-2+deb13u2	no fix listed
Medium	DEBIAN-CVE-2026-11972	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5
Medium	DEBIAN-CVE-2026-58015	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u4
Medium	DEBIAN-CVE-2026-8927	curl@8.14.1-2+deb13u4	no fix listed
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.46.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.46.0	0.52.0
Medium	DEBIAN-CVE-2026-11940	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5
Medium	GO-2026-4601	stdlib@go1.25.5	1.25.8
Medium	DEBIAN-CVE-2026-63383	libevent@2.1.12-stable-10+b1	2.1.13-stable-1~deb13u1
Medium	DEBIAN-CVE-2026-63384	libevent@2.1.12-stable-10+b1	2.1.13-stable-1~deb13u1
Medium	DEBIAN-CVE-2026-58011	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u4
Medium	GO-2026-4981	stdlib@go1.25.5	1.25.10
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Medium	DEBIAN-CVE-2026-58049	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-66036	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u3	no fix listed
Low	GO-2026-4977	stdlib@go1.25.5	1.25.10
Low	DEBIAN-CVE-2026-57433	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-19445	python3.13@3.13.5-2+deb13u4	no fix listed
Low	GO-2026-4986	stdlib@go1.25.5	1.25.10
Low	GO-2026-4918	stdlib@go1.25.5	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.48.0	0.53.0
Low	DEBIAN-CVE-2026-64835	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13221	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-58469	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-42496	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-30999	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2017-7475	cairo@1.18.4-1+b1	no fix listed
Low	DEBIAN-CVE-2026-66032	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2026-12087	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-15308	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6	no fix listed
Low	GO-2026-5942	golang.org/x/net@v0.48.0	0.56.0
Low	DEBIAN-CVE-2026-93990	expat@2.8.3-1~deb13u1	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.46.0	0.52.0

Used by

1 chart

Chart	Version	Tag	Containers
music-assistant-serverandibraeuVerified publisher	2.1.3	2.10.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.