StackRadar

ghcr.io/nicholaswilde/leantime:2.1.7-ls6 container image

GitHub Container Registry

Scanned 20 Sept 2026

Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/nicholaswilde/leantime

ghcr.io/nicholaswilde/leantime:2.1.7-ls6 resolved to 60e3485f98d7, scanned 20 Sept 2026: 162 findings, 9 critical, 3 on KEV; deployed by 1 chart, among them leantime.

Radar Score

4,4939208746

162 findings on digest 60e3485f98d7 · scanned 20 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.1.7-ls6resolves to60e3485f98d71 chartyesterday92087464,493

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

162 distinct on this digest

Findings for digest 60e3485f98d7 as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
CriticalALPINE-CVE-2021-41773KEVapache2@2.4.46-r12.4.50-r0
CriticalALPINE-CVE-2021-42013KEVapache2@2.4.46-r12.4.51-r0
CriticalALPINE-CVE-2021-44790apache2@2.4.46-r12.4.52-r0
CriticalALPINE-CVE-2021-3711openssl@1.1.1i-r01.1.1l-r0
CriticalALPINE-CVE-2021-40438KEVapache2@2.4.46-r12.4.49-r0
CriticalALPINE-CVE-2021-26691apache2@2.4.46-r12.4.48-r0
CriticalALPINE-CVE-2022-23943apache2@2.4.46-r12.4.53-r0
CriticalALPINE-CVE-2021-44224apache2@2.4.46-r12.4.52-r0
CriticalALPINE-CVE-2021-39275apache2@2.4.46-r12.4.49-r0
HighALPINE-CVE-2022-25236expat@2.2.9-r12.2.10-r2
HighALPINE-CVE-2022-22721apache2@2.4.46-r12.4.53-r0
HighALPINE-CVE-2022-0778openssl@1.1.1i-r01.1.1n-r0
HighALPINE-CVE-2022-22719apache2@2.4.46-r12.4.53-r0
HighALPINE-CVE-2021-26690apache2@2.4.46-r12.4.48-r0
HighALPINE-CVE-2021-34798apache2@2.4.46-r12.4.49-r0
HighALPINE-CVE-2022-22720apache2@2.4.46-r12.4.53-r0
HighALPINE-CVE-2021-36160apache2@2.4.46-r12.4.49-r0
HighALPINE-CVE-2018-25032zlib@1.2.11-r31.2.12-r0
HighALPINE-CVE-2021-31618apache2@2.4.46-r12.4.48-r0
HighALPINE-CVE-2021-23840openssl@1.1.1i-r01.1.1j-r0
HighALPINE-CVE-2020-35452apache2@2.4.46-r12.4.48-r0
HighALPINE-CVE-2020-13950apache2@2.4.46-r12.4.48-r0
HighALPINE-CVE-2021-3712openssl@1.1.1i-r01.1.1l-r0
HighALPINE-CVE-2021-33193apache2@2.4.46-r12.4.49-r0
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.12-r2
HighALPINE-CVE-2021-3449openssl@1.1.1i-r01.1.1k-r0
HighALPINE-CVE-2021-41524apache2@2.4.46-r12.4.50-r0
HighALPINE-CVE-2021-30641apache2@2.4.46-r12.4.48-r0
HighALPINE-CVE-2021-3450openssl@1.1.1i-r01.1.1k-r0
MediumALPINE-CVE-2021-3517libxml2@2.9.10-r52.9.10-r6
MediumALPINE-CVE-2021-22945curl@7.69.1-r37.79.0-r0
MediumALPINE-CVE-2022-25235expat@2.2.9-r12.2.10-r2
MediumALPINE-CVE-2022-22822expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-25315expat@2.2.9-r12.2.10-r2
MediumALPINE-CVE-2022-23852expat@2.2.9-r12.2.10-r1
MediumALPINE-CVE-2022-1271gzip@1.10-r01.12-r0
MediumALPINE-CVE-2022-1271xz@5.2.5-r05.2.5-r1
MediumALPINE-CVE-2022-22823expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-22824expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2021-45960expat@2.2.9-r12.2.10-r0
MediumALPINE-CVE-2022-27404freetype@2.10.4-r02.10.4-r1
MediumALPINE-CVE-2022-23308libxml2@2.9.10-r52.9.13-r0
MediumALPINE-CVE-2021-3518libxml2@2.9.10-r52.9.10-r6
MediumALPINE-CVE-2022-28391busybox@1.31.1-r191.31.1-r22
MediumALPINE-CVE-2021-39537ncurses@6.2_p20200523-r06.2_p20200523-r1
MediumALPINE-CVE-2021-36159apk-tools@2.10.5-r12.10.7-r0
MediumALPINE-CVE-2022-25314expat@2.2.9-r12.2.10-r2
MediumALPINE-CVE-2020-13938apache2@2.4.46-r12.4.48-r0
MediumALPINE-CVE-2021-22946curl@7.69.1-r37.79.0-r0
MediumALPINE-CVE-2022-22826expat@2.2.9-r12.2.10-r0

Used by

1 chart
ChartVersionTagContainers
leantimenicholaswildeVerified publisher0.1.22.1.7-ls61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 20 Sept 2026 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.