ghcr.io/nicholaswilde/odoo:version-14.0 container image
GitHub Container RegistryScanned 20 Sept 2026
Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/nicholaswilde/odoo
ghcr.io/nicholaswilde/odoo:version-14.0 resolved to 7cff9672ce07, scanned 20 Sept 2026: 402 findings, 2 critical, 4 on KEV; deployed by 1 chart, among them odoo.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
402 distinct on this digest
Findings for digest 7cff9672ce07 as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-j7hp-h8jx-5pprKEV | pillow | 10.0.1 |
| Critical | PYSEC-2026-1794KEV | pillow | 10.0.1 |
| High | PYSEC-2024-24 | aiohttp | 3.9.2 |
| High | GHSA-c4w7-xm78-47vh | y18n | 3.2.2 |
| High | GHSA-j544-7q9p-6xp8 | werkzeug | 0.15.5 |
| High | GHSA-w573-4hg7-7wgq | decode-uri-component | 0.2.1 |
| High | GHSA-qpg2-vx7j-3869 | reportlab | 3.5.28 |
| High | GHSA-3jfq-g458-7qm9 | tar | 4.4.14 |
| High | GHSA-35jh-r3h4-6jhm | lodash | 4.17.21 |
| High | DLA-3570-1KEV | libwebp | 0.6.1-2+deb10u3 |
| High | DLA-3621-1KEV | nghttp2 | 1.36.0-2+deb10u2 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.5.3 |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb10u3 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | GHSA-8q59-q68h-6hv4 | pyyaml | 5.4 |
| Medium | DSA-4963-1 | openssl | 1.1.1d-0+deb10u7 |
| Medium | DLA-3804-1 | nghttp2 | 1.36.0-2+deb10u3 |
| Medium | GHSA-rprw-h62v-c2w7 | pyyaml | 5.1 |
| Medium | DSA-5139-1 | openssl | 1.1.1n-0+deb10u2 |
| Medium | DLA-3449-1 | openssl | 1.1.1n-0+deb10u5 |
| Medium | DSA-5103-1 | openssl | 1.1.1d-0+deb10u8 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-xvch-5gv4-984h | minimist | 1.2.6 |
| Medium | GHSA-r628-mhmh-qjhw | tar | 4.4.15 |
| Medium | GHSA-pj98-2xf6-cff5 | reportlab | 3.5.31 |
| Medium | DSA-5140-1 | openldap | 2.4.47+dfsg-3+deb10u7 |
| Medium | GHSA-r7rm-8j6h-r933 | pillow | 6.2.2 |
| Medium | DLA-3325-1 | openssl | 1.1.1n-0+deb10u4 |
| Medium | GHSA-jf85-cpcp-j695 | lodash | 4.17.12 |
| Medium | GHSA-896r-f27r-55mw | json-schema | 0.4.0 |
| Medium | GHSA-p49h-hjvm-jg3h | pillow | 6.2.2 |
| Medium | DSA-5111-1 | zlib | 1:1.2.11.dfsg-1+deb10u1 |
| Medium | GHSA-8vj2-vxx3-667w | pillow | 9.0.1 |
| Medium | GHSA-7534-mm45-c74v | pillow | 8.3.0 |
| Medium | DLA-3137-1 | nodejs | 10.24.0~dfsg-1~deb10u2 |
| Medium | GHSA-462w-v97r-4m45 | jinja2 | 2.10.1 |
| Medium | DLA-3575-1 | python2.7 | 2.7.16-2+deb10u3 |
| Medium | DSA-5085-1 | expat | 2.2.6-2+deb10u3 |
| Medium | GHSA-77gc-v2xv-rvvh | pillow | 8.2.0 |
| Medium | GHSA-57h3-9rgr-c24m | pillow | 8.1.1 |
| Medium | GHSA-9j59-75qj-795w | pillow | 9.0.1 |
| Medium | GHSA-p6mc-m468-83gw | lodash | 4.17.19 |
| Medium | DLA-3085-1 | curl | 7.64.0-4+deb10u3 |
| Medium | GHSA-3wvg-mj6g-m9cv | pillow | 8.1.2 |
| Medium | GHSA-hr2v-3952-633q | deep-extend | 0.5.1 |
| Medium | GHSA-vx3p-948g-6vhq | ssri | 6.0.2 |
| Medium | GHSA-9r2w-394v-53qc | tar | 4.4.16 |
| Medium | GHSA-rwv7-3v45-hg29 | pillow | 8.2.0 |
| Medium | GHSA-x8qc-rrcw-4r46 | npm | 6.13.3 |
| Medium | GHSA-m6cx-g6qm-p2cx | npm | 6.13.3 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| odoonicholaswildeVerified publisher | 1.0.0 | version-14.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.