ghcr.io/open-telemetry/demo:1.12.0-emailservice container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/open-telemetry/demo
ghcr.io/open-telemetry/demo:1.12.0-emailservice resolved to a1f5cebb5240, scanned 14 Sept 2026: 286 findings, 3 critical; deployed by 1 chart, among them opentelemetry-demo.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
286 distinct on this digest
Findings for digest a1f5cebb5240 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | DEBIAN-CVE-2026-34182 | openssl | 3.0.20-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-31790 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2025-32990 | gnutls28 | 3.7.9-2+deb12u5 |
| Medium | DEBIAN-CVE-2026-34180 | openssl | 3.0.20-1~deb12u2 |
| Medium | DEBIAN-CVE-2025-31115 | xz-utils | 5.4.1-1 |
| Medium | DEBIAN-CVE-2026-7383 | openssl | 3.0.20-1~deb12u2 |
| Medium | DEBIAN-CVE-2024-33601 | glibc | 2.36-9+deb12u7 |
| Medium | DEBIAN-CVE-2026-8376 | perl | no fix listed |
| Medium | DEBIAN-CVE-2025-9232 | openssl | 3.0.17-1~deb12u3 |
| Medium | DEBIAN-CVE-2023-6780 | glibc | 2.36-9+deb12u4 |
| Medium | DEBIAN-CVE-2026-5260 | gnutls28 | 3.7.9-2+deb12u7 |
| Medium | GHSA-p543-xpfm-54cp | rack | 2.2.19 |
| Medium | GHSA-wpv5-97wm-hp9c | rack | 2.2.19 |
| Medium | DEBIAN-CVE-2026-28388 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2025-69421 | openssl | 3.0.18-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-28387 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-28389 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-28390 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2019-1010025 | glibc | no fix listed |
| Low | DEBIAN-CVE-2025-69420 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2026-57433 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-13221 | perl | no fix listed |
| Low | GHSA-7g2v-jj9q-g3rg | rack | 2.2.11 |
| Low | DEBIAN-CVE-2026-42496 | perl | no fix listed |
| Low | DEBIAN-CVE-2024-56406 | perl | 5.36.0-7+deb12u2 |
| Low | DEBIAN-CVE-2024-37370 | krb5 | 1.20.1-2+deb12u2 |
| Low | GHSA-vg3r-rm7w-2xgh | rexml | 3.2.7 |
| Low | DSA-5611-1 | glibc | 2.36-9+deb12u4 |
| Low | DEBIAN-CVE-2026-9076 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-12087 | perl | no fix listed |
| Low | GHSA-mxw3-3hh2-x2mh | rack | 2.2.22 |
| Low | GHSA-6xw4-3v39-52mm | rack | 2.2.20 |
| Low | GHSA-qpgp-93vx-g8v8 | puma | 7.2.1 |
| Low | DEBIAN-CVE-2026-0915 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2025-4802 | glibc | 2.36-9+deb12u11 |
| Low | DEBIAN-CVE-2023-50495 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2026-63072 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-40355 | krb5 | 1.20.1-2+deb12u5 |
| Low | DEBIAN-CVE-2026-40356 | krb5 | 1.20.1-2+deb12u5 |
| Low | DEBIAN-CVE-2026-45445 | openssl | 3.0.20-1~deb12u2 |
| Low | GHSA-hww2-5g85-429m | uri | 0.12.2 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | DEBIAN-CVE-2024-33600 | glibc | 2.36-9+deb12u7 |
| Low | GHSA-vmwr-mc7x-5vc3 | rexml | 3.3.6 |
| Low | DEBIAN-CVE-2022-48303 | tar | 1.34+dfsg-1.2+deb12u1 |
| Low | GHSA-8cgq-6mh2-7j6v | rack | 2.2.12 |
| Low | GHSA-625h-95r8-8xpm | rack | 2.2.18 |
| Low | GHSA-j4pr-3wm6-xx2r | uri | 0.12.5 |
| Low | GHSA-w9pc-fmgc-vxvw | rack | 2.2.19 |
| Low | DEBIAN-CVE-2026-42013 | gnutls28 | 3.7.9-2+deb12u7 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| opentelemetry-demogpg-dev | 0.33.8 | 1.12.0-emailservice | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.