ghcr.io/nicholaswilde/etherpad:version-1.8.14 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/nicholaswilde/etherpad

ghcr.io/nicholaswilde/etherpad:version-1.8.14 resolved to 26bbd45110d5, scanned 20 Sept 2026: 211 findings, 2 critical; deployed by 1 chart, among them etherpad.

Radar Score

4,10021683110

211 findings on digest 26bbd45110d5 · scanned 20 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-1.8.14resolves to	26bbd45110d5	1 chart	yesterday	21683110	4,100

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

83 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 26bbd45110d5 as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-hrpp-h998-j3pp	qs@6.10.1	6.10.3
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.5	no fix listed
Medium	GHSA-xvch-5gv4-984h	minimist@1.2.5	1.2.6
Medium	GHSA-r628-mhmh-qjhw	tar@6.1.0	6.1.2
Medium	GHSA-896r-f27r-55mw	json-schema@0.2.3	0.4.0
Medium	GHSA-cph5-m8f7-6c5x	axios@0.21.1	0.21.2
Medium	ALPINE-CVE-2021-22918	nodejs@14.17.1-r0	14.17.3-r0
Medium	ALPINE-CVE-2021-44531	nodejs@14.17.1-r0	14.19.0-r0
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1k-r0	1.1.1t-r0
Medium	GHSA-9w5j-4mwv-2wj8	simple-git@2.40.0	3.16.0
Medium	ALPINE-CVE-2022-28391	busybox@1.33.1-r2	1.33.1-r7
Medium	ALPINE-CVE-2021-22939	nodejs@14.17.1-r0	14.17.5-r0
Medium	GHSA-p6mc-m468-83gw	lodash.pick@4.4.0	no fix listed
Medium	ALPINE-CVE-2021-37701	nodejs@14.17.1-r0	14.17.6-r0
Medium	GHSA-28xr-mwxg-3qc8	simple-git@2.40.0	3.5.0
Medium	ALPINE-CVE-2021-36159	apk-tools@2.12.5-r1	2.12.6-r0
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1k-r0	1.1.1t-r0
Medium	GHSA-3f95-r44v-8mrg	simple-git@2.40.0	3.3.0
Medium	GHSA-9r2w-394v-53qc	tar@6.1.0	6.1.7
Medium	GHSA-hj9c-8jmm-8c52	npm@7.17.0	8.11.0
Medium	GHSA-fwr7-v2mv-hh25	async@2.6.3	2.6.4
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1k-r0	1.1.1t-r1
Medium	ALPINE-CVE-2021-44532	nodejs@14.17.1-r0	14.19.0-r0
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@3.0.0	3.0.1
Medium	GHSA-9p95-fxvg-qgq2	simple-git@2.40.0	3.15.0
Medium	GHSA-fjxv-7rqg-78g4	form-data@3.0.1	3.0.4
Medium	ALPINE-CVE-2021-44533	nodejs@14.17.1-r0	14.19.0-r0
Medium	GHSA-j4f2-536g-r55m	engine.io@3.5.0	3.6.0
Medium	GHSA-4wf5-vphf-c2xc	terser@4.8.0	4.8.1
Medium	GHSA-74fj-2j2h-c42q	follow-redirects@1.14.1	1.14.7
Medium	GHSA-crh6-fp67-6883	xmldom@0.6.0	no fix listed
Medium	GHSA-43fc-jf86-j433	axios@0.21.1	0.30.3
Medium	ALPINE-CVE-2021-37712	nodejs@14.17.1-r0	14.17.6-r0
Medium	GHSA-c2qf-rxjj-qqgw	semver@4.3.6	5.7.2
Medium	ALPINE-CVE-2021-42380	busybox@1.33.1-r2	1.33.1-r6
Medium	GHSA-qm95-pgcg-qqfq	socket.io-parser@3.4.1	3.4.2
Medium	GHSA-r683-j2x4-v87g	node-fetch@2.6.1	2.6.7
Medium	ALPINE-CVE-2021-42379	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42381	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42385	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42382	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42378	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42384	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42386	busybox@1.33.1-r2	1.33.1-r6
Medium	GHSA-qq89-hq3f-393p	tar@6.1.0	6.1.9
Medium	GHSA-rp65-9cf3-cjxr	nth-check@1.0.2	2.0.1
Medium	ALPINE-CVE-2021-22959	nodejs@14.17.1-r0	14.18.1-r0
Medium	ALPINE-CVE-2023-23918	nodejs@14.17.1-r0	14.21.3-r0
Medium	ALPINE-CVE-2021-42383	busybox@1.33.1-r2	1.33.1-r6
Medium	GHSA-hffm-xvc3-vprc	simple-git@2.40.0	3.36.0

Used by

1 chart

Chart	Version	Tag	Containers
etherpadnicholaswildeVerified publisher	1.0.2	version-1.8.14	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.