ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.6.1resolves to	43b23d55e4be	1 chart	8 days ago	1871333	5,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

413 distinct on this digest

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-754f-8gm6-c4r2	ruby-saml@1.13.0	1.18.0
High	GHSA-xr9x-r78c-5hrm	activestorage@6.1.7.2	7.2.3.2
High	GHSA-4vc4-m8qh-g8jm	ruby-saml@1.13.0	1.18.0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	GHSA-jw9c-mfg7-9rx2	ruby-saml@1.13.0	1.17.0
High	DLA-4104-1KEV	freetype@2.10.4+dfsg-1+deb11u1	2.10.4+dfsg-1+deb11u2
High	DSA-5497-2KEV	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2
High	DSA-5510-1KEV	libvpx@1.9.0-1	1.9.0-1+deb11u1
High	DSA-5514-1KEV	glibc@2.31-13+deb11u5	2.31-13+deb11u7
Medium	DLA-3859-1	systemd@247.3-7+deb11u1	247.3-7+deb11u6
Medium	DSA-5591-1	libssh@0.9.5-1+deb11u1	0.9.8-0+deb11u1
Medium	DLA-4052-1	postgresql-13@13.9-0+deb11u1	13.19-0+deb11u1
Medium	DSA-5347-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u1
Medium	DSA-5673-1	glibc@2.31-13+deb11u5	2.31-13+deb11u9
Medium	GHSA-22f2-v57c-j9cx	rack@2.2.6.2	2.2.8.1
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u4	1.1.1n-0+deb11u5
Medium	GHSA-r4mg-4433-c7g3	activestorage@6.1.7.2	7.1.5.2
Medium	DLA-3942-1	openssl@1.1.1n-0+deb11u4	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u2
Medium	GHSA-76p3-8jx3-jpfq	loader-utils@2.0.0	2.0.3
Medium	GHSA-v5h6-c2hv-hv3r	stringio@3.0.1	3.0.1.1
Medium	GHSA-vx3p-948g-6vhq	ssri@8.0.0	8.0.1
Medium	GHSA-vc47-6rqg-c7f5	cgi@0.2.1	0.2.2
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@4.1.0	4.1.1
Medium	GHSA-fjxv-7rqg-78g4	form-data@4.0.0	4.0.4
Medium	GHSA-hxcc-f52p-wc94	serialize-javascript@2.1.2	3.1.0
Medium	GHSA-4wf5-vphf-c2xc	terser@5.13.1	5.14.2
Medium	GHSA-mw96-cpmx-2vgc	rollup@2.72.1	2.80.0
Medium	GHSA-c2qf-rxjj-qqgw	semver@5.7.1	5.7.2
Medium	GHSA-43fc-jf86-j433	axios@1.3.2	1.13.5
Medium	GHSA-hv5j-3h9f-99c2	uri@0.10.1	0.10.2
Medium	GHSA-ww4x-rwq6-qpgf	omniauth@1.9.2	2.0.0
Medium	GHSA-fg7x-g82r-94qc	time@0.1.0	0.1.1
Medium	GHSA-hhq3-ff78-jv3g	loader-utils@2.0.0	2.0.4
Medium	GHSA-wf6x-7x77-mvgw	immutable@4.2.4	4.3.8
Medium	GHSA-3rfm-jhwj-7488	loader-utils@2.0.0	2.0.4
Medium	GHSA-rp65-9cf3-cjxr	nth-check@1.0.2	2.0.1
Medium	GHSA-68xg-gqqm-vgj8	puma@5.6.5	5.6.7
Medium	GHSA-3h57-hmj3-gj3p	rack@2.2.6.2	2.2.6.3
Medium	GHSA-x76w-6vjr-8xgj	actionpack@6.1.7.2	6.1.7.9
Medium	GHSA-72xf-g2v4-qvf3	tough-cookie@4.1.2	4.1.3
Medium	GHSA-vfg9-r3fq-jvx4	actionpack@6.1.7.2	6.1.7.9
Medium	GHSA-35jp-ww65-95wh	axios@1.3.2	1.16.0
Medium	GHSA-wwhv-wxv9-rpgw	actiontext@6.1.7.2	6.1.7.9
Medium	GHSA-92rq-c8cf-prrq	ruby-saml@1.13.0	1.18.0
Medium	GHSA-grv7-fg5c-xmjg	braces@3.0.2	3.0.3
Medium	GHSA-h47h-mwp9-c6q6	actionmailer@6.1.7.2	6.1.7.9
Medium	GHSA-q339-8rmv-2mhv	erb@2.2.0	4.0.3.1
Medium	GHSA-2rxp-v6pw-ch6m	rexml@3.2.5	3.3.9
Medium	GHSA-3h5v-q93c-6h6q	ws@7.4.6	7.5.10

Used by

1 chart

Chart	Version	Tag	Containers
mastodonrivals-spaceVerified publisher	3.1.2	1.6.1	8

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.