ghcr.io/music-assistant/server:2.7.5 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/music-assistant/server
ghcr.io/music-assistant/server:2.7.5 resolved to 3522e8a7a8f0, scanned 14 Sept 2026: 681 findings, 0 critical; deployed by 1 chart, among them music-assistant-server.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 3522e8a7a8f0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2016-2781 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-1299 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2025-8176 | tiff | no fix listed |
| Low | DEBIAN-CVE-2026-42767 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-5545 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-48962 | perl | no fix listed |
| Low | DEBIAN-CVE-2025-7709 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-3784 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2025-68471 | avahi | no fix listed |
| Low | PYSEC-2026-237 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2024-28755 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2026-56210 | aom | 3.6.0-1+deb12u3 |
| Low | DEBIAN-CVE-2025-15282 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2025-14819 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2026-42015 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2025-11468 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | GHSA-mfx4-hv73-q22v | aiohttp | 3.14.2 |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-11824 | sqlite3 | no fix listed |
| Low | GHSA-cq5v-8q36-5273 | aiohttp | 3.14.3 |
| Low | GHSA-phvx-9mgw-67r5 | zeroconf | 0.149.6 |
| Low | GHSA-rfg2-pjw2-56x2 | zeroconf | 0.149.7 |
| Low | DEBIAN-CVE-2025-68468 | avahi | no fix listed |
| Low | GHSA-m2h6-j472-rp4c | cryptography | 49.0.0 |
| Low | DEBIAN-CVE-2026-1502 | python3.11 | no fix listed |
| Low | GHSA-2vrm-gr82-f7m5 | aiohttp | 3.13.4 |
| Low | DEBIAN-CVE-2026-59849 | libssh | no fix listed |
| Low | DEBIAN-CVE-2026-19672 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2025-22921 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-0964 | libssh | no fix listed |
| Low | DEBIAN-CVE-2026-48961 | perl | no fix listed |
| Low | GHSA-9663-mqmp-p9mm | zeroconf | 0.149.12 |
| Low | GHSA-9pgc-3ccv-5297 | zeroconf | 0.149.5 |
| Low | DEBIAN-CVE-2026-87933 | cjson | no fix listed |
| Low | DEBIAN-CVE-2026-0865 | python3.11 | 3.11.2-6+deb12u7 |
| Low | DEBIAN-CVE-2026-63074 | openssl | no fix listed |
| Low | GHSA-mq44-7p77-q5h7 | aiohttp | 3.14.2 |
| Low | DEBIAN-CVE-2024-52616 | avahi | no fix listed |
| Low | DEBIAN-CVE-2025-14524 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-hg6j-4rv6-33pg | aiohttp | 3.14.0 |
| Low | DEBIAN-CVE-2025-14831 | gnutls28 | 3.7.9-2+deb12u6 |
| Low | DEBIAN-CVE-2025-61144 | tiff | no fix listed |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-67217 | cjson | no fix listed |
| Low | DEBIAN-CVE-2026-75146 | ffmpeg | no fix listed |
| Low | GHSA-g6cj-pr64-35w5 | cryptography | 50.0.0 |
| Low | GHSA-mwh4-6h8g-pg8w | aiohttp | 3.13.4 |
| Low | GHSA-pwv6-vv43-88gr | pillow | 12.2.0 |
| Low | DEBIAN-CVE-2026-8328 | python3.11 | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| music-assistant-serverlmatfyVerified publisher | 0.1.9 | 2.7.5 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.