ghcr.io/puckpuck/seashell:1.2 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/puckpuck/seashell
ghcr.io/puckpuck/seashell:1.2 resolved to ef5e31333821, scanned 14 Sept 2026: 241 findings, 9 critical, 3 on KEV; deployed by 1 chart, among them seashell.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
241 distinct on this digest
Findings for digest ef5e31333821 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2024-38475KEV | apache2 | 2.4.60-r0 |
| Critical | ALPINE-CVE-2023-38545 | curl | 8.4.0-r0 |
| Critical | ALPINE-CVE-2024-6387 | openssh | 9.3_p2-r2 |
| Critical | ALPINE-CVE-2023-44487KEV | nghttp2 | 1.57.0-r0 |
| Critical | ALPINE-CVE-2023-50387 | bind | 9.18.24-r0 |
| Critical | ALPINE-CVE-2024-38476 | apache2 | 2.4.60-r0 |
| Critical | ALPINE-CVE-2024-27316 | apache2 | 2.4.59-r0 |
| Critical | ALPINE-CVE-2025-6965 | sqlite | 3.41.2-r4 |
| Critical | ALPINE-CVE-2023-50868 | bind | 9.18.24-r0 |
| High | ALPINE-CVE-2023-43622 | apache2 | 2.4.58-r0 |
| High | ALPINE-CVE-2024-38472 | apache2 | 2.4.60-r0 |
| High | ALPINE-CVE-2024-6119 | openssl | 3.1.7-r0 |
| High | ALPINE-CVE-2024-2398 | curl | 8.7.1-r0 |
| High | ALPINE-CVE-2024-32002 | git | 2.40.3-r0 |
| High | ALPINE-CVE-2023-48795 | openssh | 9.3_p2-r1 |
| High | ALPINE-CVE-2023-48795 | libssh2 | 1.11.0-r0 |
| High | ALPINE-CVE-2024-39573 | apache2 | 2.4.60-r0 |
| High | GHSA-qppj-fm5r-hxr3KEV | golang.org/ | 0.17.0 |
| High | ALPINE-CVE-2024-38473 | apache2 | 2.4.60-r0 |
| High | GHSA-4v7x-pqxf-cx7m | golang.org/ | 0.23.0 |
| High | ALPINE-CVE-2024-2511 | openssl | 3.1.4-r6 |
| High | ALPINE-CVE-2024-12705 | bind | 9.18.33-r0 |
| High | ALPINE-CVE-2024-11187 | bind | 9.18.33-r0 |
| High | ALPINE-CVE-2025-40775 | bind | 9.18.37-r0 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | ALPINE-CVE-2024-7264 | curl | 8.9.1-r0 |
| Medium | ALPINE-CVE-2024-5535 | openssl | 3.1.6-r0 |
| Medium | GHSA-83g2-8m93-v3w7 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 |
| Medium | ALPINE-CVE-2025-26465 | openssh | 9.3_p2-r3 |
| Medium | ALPINE-CVE-2024-38474 | apache2 | 2.4.60-r0 |
| Medium | ALPINE-CVE-2024-0760 | bind | 9.18.31-r0 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | ALPINE-CVE-2024-6197 | curl | 8.9.0-r0 |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | ALPINE-CVE-2023-38709 | apache2 | 2.4.59-r0 |
| Medium | ALPINE-CVE-2023-5363 | openssl | 3.1.4-r0 |
| Medium | ALPINE-CVE-2024-37371 | krb5 | 1.20.2-r1 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | ALPINE-CVE-2024-38477 | apache2 | 2.4.60-r0 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | ALPINE-CVE-2024-45492 | expat | 2.6.3-r0 |
| Medium | ALPINE-CVE-2023-31122 | apache2 | 2.4.58-r0 |
| Medium | ALPINE-CVE-2021-27219 | glib | 2.66.6-r0 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | ALPINE-CVE-2024-4741 | openssl | 3.1.6-r0 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GHSA-r9hx-vwmv-q579 | setuptools | 65.5.1 |
| Medium | ALPINE-CVE-2024-45491 | expat | 2.6.3-r0 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | ALPINE-CVE-2024-7592 | python3 | 3.11.10-r0 |