StackRadar

ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.6.1resolves to43b23d55e4be1 chart8 days ago18713335,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

333 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.20.5.0
LowGHSA-rhx6-c78j-4q9wpath-to-regexp@0.1.70.1.12
LowGHSA-7g2v-jj9q-g3rgrack@2.2.6.22.2.11
LowGHSA-v62p-rq8g-8h59pbkdf2@3.1.13.1.3
LowGHSA-62hf-57xw-28j9axios@1.3.21.15.1
LowGHSA-h7cp-r72f-jxh6pbkdf2@3.1.13.1.3
LowGHSA-9v8j-x534-2fx3ruby-saml@1.13.01.18.0
LowGHSA-vg3r-rm7w-2xghrexml@3.2.53.2.7
LowGHSA-34x7-hfp2-rc4vtar@6.1.117.5.7
LowGHSA-q8qp-cvcw-x6jjaxios@1.3.21.15.2
LowGHSA-3g43-6gmg-66jwaxios@1.3.21.15.2
LowGHSA-cxjh-pqwp-8mfpfollow-redirects@1.15.21.15.6
LowGHSA-h8w8-99g7-qmvjconcurrent-ruby@1.2.01.3.7
LowGHSA-hfxv-24rg-xrqfaxios@1.3.21.16.0
LowGHSA-2cw7-v8ff-p88roj@3.13.233.17.3
LowGHSA-475m-ph3x-64gpoj@3.13.233.17.3
LowGHSA-9cv6-qcjw-4grxoj@3.13.233.17.3
LowGHSA-m578-w5vf-rfcmoj@3.13.233.17.3
LowGHSA-vwm4-62gf-x745oj@3.13.233.17.3
LowDLA-3954-1postgresql-13@13.9-0+deb11u113.17-0+deb11u1
LowDLA-4297-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u6
LowGHSA-mxw3-3hh2-x2mhrack@2.2.6.22.2.22
LowGHSA-v56q-mh7h-f735immutable@4.2.44.3.9
LowGHSA-j5f8-grm9-p9fcaxios@1.3.21.16.0
LowDSA-5554-1postgresql-13@13.9-0+deb11u113.13-0+deb11u1
LowGHSA-6xw4-3v39-52mmrack@2.2.6.22.2.20
LowGHSA-qpgp-93vx-g8v8puma@5.6.57.2.1
LowGHSA-rgw5-rvv9-x895brace-expansion@2.0.12.1.4
LowGHSA-9pmc-p236-855hcss_parser@1.12.03.0.0
LowGHSA-f5x3-32g6-xq36tar@6.1.116.2.1
LowGHSA-f5ww-cq3m-q3g7sanitize@6.0.16.0.2
LowGHSA-j8xg-fqg3-53r7word-wrap@1.2.31.2.4
LowGHSA-hww2-5g85-429muri@0.10.10.10.3
LowGHSA-6g55-p6wh-862qpostcss@7.0.328.5.12
LowGHSA-vmwr-mc7x-5vc3rexml@3.2.53.3.6
LowGHSA-pmwg-cvhr-8vh7axios@1.3.21.15.1
LowGHSA-8cgq-6mh2-7j6vrack@2.2.6.22.2.12
LowGHSA-qffp-2rhf-9h96tar@6.1.117.5.10
LowGHSA-625h-95r8-8xpmrack@2.2.6.22.2.18
LowGHSA-j4pr-3wm6-xx2ruri@0.10.10.12.5
LowGHSA-2x63-gw47-w4mmwebsocket-driver@0.7.50.8.2
LowGHSA-w9pc-fmgc-vxvwrack@2.2.6.22.2.19
LowGHSA-23hp-3jrh-7fpwtar@6.1.117.5.19
LowGHSA-52cp-r559-cp3mjs-yaml@3.14.13.15.0
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.04.0.6
LowGHSA-3v45-f3vh-wg7moj@3.13.233.17.3
LowGHSA-7r86-cg39-jmmjminimatch@5.0.15.1.8
LowGHSA-x9w5-v3q2-3rhwbrowserify-sign@4.2.14.2.2
LowGHSA-952p-6rrq-rcjvmicromatch@3.1.104.0.8
LowGHSA-cmh9-rx85-xj38sidekiq-unique-jobs@7.1.297.1.33

Used by

1 chart
ChartVersionTagContainers
mastodonrivals-spaceVerified publisher3.1.21.6.18

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.