ghcr.io/papra-hq/papra:26.7.0-rootless container image

GitHub Container Registry

Scanned 17 Oct 2026

Deployed by 1 of 18,143 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/papra-hq/papra

ghcr.io/papra-hq/papra:26.7.0-rootless resolved to bf4a66e776d0, scanned 17 Oct 2026: 326 findings, 1 critical; deployed by 1 chart, among them papra.

Radar Score

3,6301043282

326 findings on digest bf4a66e776d0 · scanned 17 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
26.7.0-rootlessresolves to	bf4a66e776d0	1 chart	today	1043282	3,630

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

282 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest bf4a66e776d0 as scanned on 17 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 17 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-8vvx-rff5-p5rq	nodemailer@9.1.1	10.0.2
Low	GHSA-vmf3-w455-68vh	tar@7.5.2	7.5.16
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-42772	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	GO-2026-4340	stdlib@go1.23.12	1.24.12
Low	DEBIAN-CVE-2023-31438	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-53614	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-15534	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-8674	glibc@2.41-12+deb13u3	no fix listed
Low	GO-2026-6599	stdlib@go1.23.12	1.26.9
Low	GO-2026-6600	stdlib@go1.23.12	1.26.9
Low	DEBIAN-CVE-2025-14104	util-linux@2.41-5	2.41.3-1
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@5.0.6	5.0.12
Low	DEBIAN-CVE-2026-53613	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-56392	coreutils@9.7-3	no fix listed
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@4.1.1	4.3.1
Low	DEBIAN-CVE-2026-35189	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-19542	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-53612	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-56391	coreutils@9.7-3	no fix listed
Low	GO-2025-3503	stdlib@go1.20.7	1.23.7
Low	DEBIAN-CVE-2026-50813	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2017-18018	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-75805	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-54370	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.35+dfsg-3.1	no fix listed
Low	GO-2026-4869	stdlib@go1.23.12	1.25.9
Low	GHSA-g57g-f23g-4646	nodemailer@9.1.1	10.0.9
Low	GHSA-w7fw-mjwx-w883	qs@6.14.0	6.14.2
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13595	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-86805	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-hxh3-vqpv-xpqv	hono@4.13.5	4.13.7
Low	GHSA-6vj9-mwq6-2f5v	nodemailer@9.1.1	10.0.2
Low	GHSA-6rw7-vpxm-498p	qs@6.14.0	6.14.1
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-102473	dash@0.5.12-12	no fix listed
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-v3r7-h72x-cjcm	undici@6.26.0	6.28.0
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-6	no fix listed
Low	DEBIAN-CVE-2024-56433	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2026-15059	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-8xcm-r25x-g524	undici@6.26.0	6.28.0
Low	DEBIAN-CVE-2011-4116	perl@5.40.1-6	no fix listed
Low	GO-2025-3447	stdlib@go1.20.7	1.22.12
Low	DEBIAN-CVE-2026-35191	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3

Used by

1 chart

Chart	Version	Tag	Containers
paprahelmforgeVerified publisher	1.0.1	26.7.0-rootless	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.