ghcr.io/papra-hq/papra:26.7.0-rootless container image

GitHub Container Registry

Scanned 17 Oct 2026

Deployed by 1 of 18,143 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/papra-hq/papra

ghcr.io/papra-hq/papra:26.7.0-rootless resolved to bf4a66e776d0, scanned 17 Oct 2026: 326 findings, 1 critical; deployed by 1 chart, among them papra.

Radar Score

3,6301043282

326 findings on digest bf4a66e776d0 · scanned 17 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
26.7.0-rootlessresolves to	bf4a66e776d0	1 chart	today	1043282	3,630

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

326 distinct on this digest

Findings for digest bf4a66e776d0 as scanned on 17 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 17 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	GO-2024-2598	stdlib@go1.20.7	1.21.8
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u3	no fix listed
Low	GO-2023-2186	stdlib@go1.20.7	1.20.11
Low	GO-2026-6613	stdlib@go1.23.12	1.26.9
Low	DEBIAN-CVE-2026-76642	util-linux@2.41-5	no fix listed
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	GO-2025-3849	stdlib@go1.20.7	1.23.12
Low	GO-2026-6605	stdlib@go1.23.12	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	GO-2026-6610	stdlib@go1.23.12	1.26.9
Low	GHSA-2vr4-cq9g-pvrc	ip-address@10.2.0	10.5.1
Low	DEBIAN-CVE-2026-57432	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-63074	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.15	3.3.18
Low	GHSA-86j7-9j95-vpqj	better-auth@1.6.11	1.6.13
Low	GO-2025-3373	stdlib@go1.20.7	1.22.11
Low	GHSA-v53p-9fqp-m79j	nodemailer@9.1.1	10.0.6
Low	GHSA-fxqj-rqcc-2cmp	postcss@8.4.49	8.5.23
Low	DEBIAN-CVE-2026-89157	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-72897	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	GO-2026-4970	stdlib@go1.23.12	1.25.12
Low	DEBIAN-CVE-2026-11824	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	GHSA-9ppj-qmqm-q256	tar@7.5.2	7.5.11
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.2.0	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.2	7.5.18
Low	GO-2025-4012	stdlib@go1.23.12	1.24.8
Low	DEBIAN-CVE-2026-103111	pcre2@10.46-1~deb13u1	10.46-1~deb13u3
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.2.0	10.7.1
Low	DEBIAN-CVE-2026-78408	util-linux@2.41-5	no fix listed
Low	DEBIAN-CVE-2026-53615	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GO-2026-4980	stdlib@go1.23.12	1.25.10
Low	DEBIAN-CVE-2026-7017	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	GO-2024-2600	stdlib@go1.20.7	1.21.8
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	GHSA-3wwx-pv8p-q78v	undici@6.26.0	6.28.1
Low	GHSA-3xpg-4rpp-hhhm	undici@8.5.0	8.10.2
Low	GHSA-2jfj-6hjv-fm6j	undici@8.5.0	8.10.2
Low	GO-2025-4011	stdlib@go1.23.12	1.24.8
Low	GO-2025-4015	stdlib@go1.23.12	1.24.8
Low	GHSA-jr45-8vmc-qm54	undici@8.5.0	8.9.0
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.4	7.1.6
Low	GO-2026-4603	stdlib@go1.23.12	1.25.8
Low	GO-2025-4175	stdlib@go1.23.12	1.24.11

Used by

1 chart

Chart	Version	Tag	Containers
paprahelmforgeVerified publisher	1.0.1	26.7.0-rootless	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.