ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.6.1resolves to	43b23d55e4be	1 chart	8 days ago	1871333	5,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

333 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-3p68-rc4w-qgx5	axios@1.3.2	1.15.0
Low	GHSA-rrqh-93c8-j966	ruby-saml@1.13.0	1.18.1
Low	DSA-5518-1	libvpx@1.9.0-1	1.9.0-1+deb11u2
Low	GHSA-7fh5-64p2-3v2j	postcss@7.0.32	8.4.31
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.4	3.3.12
Low	DSA-5726-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u5
Low	GHSA-p9fm-f462-ggrg	activestorage@6.1.7.2	7.2.3.1
Low	GHSA-4xqq-m2hx-25v8	rexml@3.2.5	3.3.2
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-2m96-52r3-2f3g	fugit@1.7.1	1.11.1
Low	DSA-5686-1	dav1d@0.7.1-3	0.7.1-3+deb11u1
Low	GHSA-3m6q-jj5j-38c9	oj@3.13.23	3.17.3
Low	GHSA-c4rq-3m3g-8wgx	nokogiri@1.14.1	1.19.3
Low	GHSA-48rx-c7pg-q66r	excon@0.95.0	1.5.0
Low	GHSA-75xq-5h9v-w6px	net-imap@0.1.1	0.4.24
Low	DLA-3893-1	expat@2.2.10-2+deb11u5	2.2.10-2+deb11u6
Low	DSA-5622-1	postgresql-13@13.9-0+deb11u1	13.14-0+deb11u1
Low	GHSA-9cv2-cfxc-v4v2	nokogiri@1.14.1	1.19.4
Low	GHSA-phwj-rprq-35pp	nokogiri@1.14.1	1.19.4
Low	GHSA-ghhp-3qvg-889p	websocket-driver@0.7.5	0.8.1
Low	GHSA-fxqj-rqcc-2cmp	postcss@7.0.32	8.5.23
Low	DLA-4402-1	libsndfile@1.0.31-2	1.0.31-2+deb11u2
Low	GHSA-2vqw-3mp8-cgmx	puma@5.6.5	7.2.1
Low	GHSA-33ph-fccm-39pj	websocket-driver@0.7.5	0.8.1
Low	GHSA-9ppp-w3g4-fh4q	oj@3.13.23	3.17.3
Low	GHSA-q2gm-54r6-8fwm	oj@3.13.23	3.17.3
Low	GHSA-35w3-pjm6-wj95	oj@3.13.23	3.17.3
Low	GHSA-42h9-826w-cgv3	axios@1.3.2	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.3.2	1.18.0
Low	GHSA-5prr-v3j2-97mh	nokogiri@1.14.1	1.19.4
Low	DSA-5433-1	libx11@2:1.7.2-1	2:1.7.2-1+deb11u1
Low	GHSA-fwhr-88qx-h9g7	actionpack@6.1.7.2	6.1.7.8
Low	GHSA-83g3-92jg-28cx	tar@6.1.11	7.5.8
Low	GHSA-j3g3-5qv5-52mj	net-imap@0.1.1	0.2.5
Low	GHSA-9hf4-67fc-4vf4	puma@5.6.5	5.6.9
Low	GHSA-p67v-3w7g-wjg7	nokogiri@1.14.1	1.19.4
Low	GHSA-wjv4-x9w8-wm3h	nokogiri@1.14.1	1.19.4
Low	DSA-5746-1	postgresql-13@13.9-0+deb11u1	13.16-0+deb11u1
Low	GHSA-cvp8-5r8g-fhvq	omniauth-saml@1.10.3	1.10.5
Low	DLA-4107-1	openjpeg2@2.4.0-3	2.4.0-3+deb11u1
Low	DLA-4321-1	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	DLA-3928-1	ffmpeg@7:4.3.5-0+deb11u1	7:4.3.8-0+deb11u1
Low	DLA-4385-1	libssh@0.9.5-1+deb11u1	0.9.8-0+deb11u2
Low	GHSA-c32j-vqhx-rx3x	jwt@2.5.0	2.10.3
Low	GHSA-qj8w-gfj5-8c6v	serialize-javascript@5.0.1	7.0.5
Low	DSA-5721-1	ffmpeg@7:4.3.5-0+deb11u1	7:4.3.7-0+deb11u1
Low	GHSA-w8wr-v893-vjvp	tar@6.1.11	7.5.18
Low	GHSA-8p34-64r3-mwg8	net-imap@0.1.1	0.5.15
Low	GHSA-qjxf-mc72-wjr2	devise-two-factor@4.0.2	6.0.0

Used by

1 chart

Chart	Version	Tag	Containers
mastodonrivals-spaceVerified publisher	3.1.2	1.6.1	8

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.