ghcr.io/music-assistant/server:2.10.5 container image

GitHub Container Registry

Scanned 7 Oct 2026

Deployed by 1 of 18,035 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/music-assistant/server

ghcr.io/music-assistant/server:2.10.5 resolved to 28023f8c0d96, scanned 7 Oct 2026: 401 findings, 0 critical; deployed by 1 chart, among them music-assistant-server.

Radar Score

4,4320077323

401 findings on digest 28023f8c0d96 · scanned 7 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.10.5resolves to	28023f8c0d96	1 chart	2 days ago	0077323	4,432

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

401 distinct on this digest

Findings for digest 28023f8c0d96 as scanned on 7 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 7 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-68471	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-89157	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-72897	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	GO-2026-4970	stdlib@go1.25.5	1.25.12
Low	DEBIAN-CVE-2026-11824	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	DEBIAN-CVE-2025-68468	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2025-61144	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-8458	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2024-52616	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-16118	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-75146	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-103111	pcre2@10.46-1~deb13u1	10.46-1~deb13u3
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2026-52492	tiff@4.7.0-3+deb13u3	no fix listed
Low	GO-2026-4980	stdlib@go1.25.5	1.25.10
Low	DEBIAN-CVE-2026-70628	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-7017	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-15366	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-90816	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-63388	libevent@2.1.12-stable-10+b1	2.1.13-stable-1~deb13u1
Low	DEBIAN-CVE-2026-88806	libx11@2:1.8.12-1	no fix listed
Low	DEBIAN-CVE-2024-52615	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2025-15079	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-24401	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-58470	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.64.0-1.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2026-4603	stdlib@go1.25.5	1.25.8
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.46.0	0.52.0
Low	GO-2026-4864	stdlib@go1.25.5	1.25.9
Low	DEBIAN-CVE-2025-15367	python3.13@3.13.5-2+deb13u4	no fix listed
Low	GO-2026-4865	stdlib@go1.25.5	1.25.9
Low	GO-2026-4982	stdlib@go1.25.5	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.48.0	0.55.0
Low	DEBIAN-CVE-2026-86143	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-12505	cifs-utils@2:7.4-1	no fix listed
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
music-assistant-serverandibraeuVerified publisher	2.1.3	2.10.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.