ghcr.io/papra-hq/papra:26.7.0-rootless container image

GitHub Container Registry

Scanned 17 Oct 2026

Deployed by 1 of 18,143 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/papra-hq/papra

ghcr.io/papra-hq/papra:26.7.0-rootless resolved to bf4a66e776d0, scanned 17 Oct 2026: 326 findings, 1 critical; deployed by 1 chart, among them papra.

Radar Score

3,6301043282

326 findings on digest bf4a66e776d0 · scanned 17 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
26.7.0-rootlessresolves to	bf4a66e776d0	1 chart	today	1043282	3,630

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

43 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest bf4a66e776d0 as scanned on 17 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 17 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u3	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u3	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u3	no fix listed
Medium	GO-2024-2887	stdlib@go1.20.7	1.21.11
Medium	GO-2023-2102	stdlib@go1.20.7	1.20.10
Medium	GO-2023-2185	stdlib@go1.20.7	1.20.11
Medium	DEBIAN-CVE-2026-63073	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u3	no fix listed
Medium	GO-2026-4341	stdlib@go1.23.12	1.24.12
Medium	GO-2026-4337	stdlib@go1.23.12	1.24.13
Medium	DEBIAN-CVE-2026-63076	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2026-5450	glibc@2.41-12+deb13u3	2.41-12+deb13u4
Medium	DEBIAN-CVE-2026-18798	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	GO-2025-3563	stdlib@go1.20.7	1.23.8
Medium	GO-2026-5026	stdlib@go1.23.12	1.25.13
Medium	GO-2024-2963	stdlib@go1.20.7	1.21.12
Medium	GHSA-2v35-w6hq-6mfw	@xmldom/xmldom@0.8.11	0.8.13
Medium	GO-2026-6612	stdlib@go1.23.12	1.26.9
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u3	no fix listed
Medium	GO-2024-3106	stdlib@go1.20.7	1.22.7
Medium	GO-2026-6604	stdlib@go1.23.12	1.26.9
Medium	DEBIAN-CVE-2026-8376	perl@5.40.1-6	5.40.1-6+deb13u1
Medium	GO-2024-2609	stdlib@go1.20.7	1.21.8
Medium	GO-2024-3107	stdlib@go1.20.7	1.22.7
Medium	DEBIAN-CVE-2026-14457	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	GHSA-f6ww-3ggp-fr8h	@xmldom/xmldom@0.8.11	0.8.13
Medium	GHSA-j759-j44w-7fr8	@xmldom/xmldom@0.8.11	0.8.13
Medium	GHSA-x6wf-f3px-wcqx	@xmldom/xmldom@0.8.11	0.8.13
Medium	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.11	0.8.15
Medium	GHSA-4w3w-2rp5-g8jm	@xmldom/xmldom@0.8.11	0.8.14
Medium	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.11	0.8.15
Medium	GHSA-w2rr-34g9-rvrj	@xmldom/xmldom@0.8.11	0.8.14
Medium	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.11	0.8.15
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.10	7.5.11
Medium	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.11	0.8.15
Medium	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.11	0.8.15
Medium	DEBIAN-CVE-2026-63072	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u3	no fix listed
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.1.2	3.1.3
Medium	GO-2026-4601	stdlib@go1.23.12	1.25.8
Medium	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.11	0.8.15
Medium	GO-2026-4981	stdlib@go1.23.12	1.25.10
Medium	GHSA-34x7-hfp2-rc4v	tar@7.5.2	7.5.7

Used by

1 chart

Chart	Version	Tag	Containers
paprahelmforgeVerified publisher	1.0.1	26.7.0-rootless	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.