StackRadar

ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.6.1resolves to43b23d55e4be1 chart8 days ago18713335,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

333 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-m7pr-hjqh-92cmaxios@1.3.21.15.1
LowGHSA-f27w-vcwj-c954bcrypt@3.1.173.1.22
LowGHSA-49q7-c7j4-3p7melliptic@6.5.46.5.7
LowDSA-5394-1ffmpeg@7:4.3.5-0+deb11u17:4.3.6-0+deb11u1
LowGHSA-r657-rxjc-j557rack@2.2.6.22.2.20
LowDSA-5349-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u3
LowDSA-5567-1tiff@4.2.0-1+deb11u34.2.0-1+deb11u5
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowGHSA-mrxw-mxhj-p664nokogiri@1.14.11.18.4
LowGHSA-mmx7-hfxf-jppxaxios@1.3.21.18.0
LowDLA-4064-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u6
LowDLA-4257-1libcaca@0.99.beta19-2.20.99.beta19-2.2+deb11u1
LowGHSA-8j3g-f24p-4mpwwebsocket-driver@0.7.50.8.1
LowGHSA-353f-x4gh-cqq8nokogiri@1.14.11.18.9
LowGHSA-hw46-3hmr-x9xvomniauth-saml@1.10.31.10.6
LowMAL-2022-4691monorepo-symlink-test@0.0.0no fix listed
LowGHSA-5v8h-3h3q-446pnokogiri@1.14.11.19.4
LowGHSA-76r7-hhxj-r776activerecord@6.1.7.27.1.5.2
LowGHSA-xh69-987w-hrp8resolv@0.2.10.2.3
LowDSA-5409-1libssh@0.9.5-1+deb11u10.9.7-0+deb11u1
LowDSA-5678-1glibc@2.31-13+deb11u52.31-13+deb11u10
LowGHSA-hm49-wcqc-g2xgnet-imap@0.1.10.4.24
LowDLA-4267-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u8
LowDLA-4063-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u7
LowDLA-4382-1libsdl2@2.0.14+dfsg2-3+deb11u12.0.14+dfsg2-3+deb11u2
LowDLA-3881-1aom@1.0.0.errata1-31.0.0.errata1-3+deb11u2
LowDLA-3962-1glib2.0@2.66.8-12.66.8-1+deb11u5
LowGHSA-cm22-4g7w-348pserve-static@1.15.01.16.0
LowDSA-5401-1postgresql-13@13.9-0+deb11u113.11-0+deb11u1
LowGHSA-gvwx-54wh-qm9jtar@6.1.117.5.17
LowDLA-4344-1gdk-pixbuf@2.42.2+dfsg-1+deb11u12.42.2+dfsg-1+deb11u4
LowGHSA-434g-2637-qmqrelliptic@6.5.46.5.6
LowGHSA-vjh7-7g9h-fjfhelliptic@6.5.46.6.1
LowGHSA-33mh-2634-fwr2faraday@1.9.31.10.5
LowDLA-4061-1libtasn1-6@4.16.0-2+deb11u14.16.0-2+deb11u2
LowGHSA-378v-28hj-76wfbn.js@4.12.04.12.3
LowDSA-5391-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u4
LowGHSA-fv7c-fp4j-7gwp@babel/plugin-transform-modules-systemjs@7.19.67.29.4
LowGHSA-977x-g7h5-7qgwelliptic@6.5.46.5.7
LowGHSA-28wg-ghj8-5hjvnanoid@3.3.43.3.16
LowGHSA-m6fv-jmcg-4jfgsend@0.18.00.19.0
LowGHSA-w9j2-pvgh-6h63axios@1.3.21.15.1
LowDLA-4145-1expat@2.2.10-2+deb11u52.2.10-2+deb11u7
LowGHSA-2v37-7h3g-55p8nanoid@3.3.43.3.18
LowGHSA-58qx-3vcg-4xpxws@8.12.08.20.1
LowGHSA-4vpr-x523-8j87svgo@1.3.22.8.4
LowDLA-4481-1libpng1.6@1.6.37-31.6.37-3+deb11u2
LowGHSA-fc9h-whq2-v747elliptic@6.5.46.6.0
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.12.3.2
LowDSA-5408-1libwebp@0.6.1-2.10.6.1-2.1+deb11u1

Used by

1 chart
ChartVersionTagContainers
mastodonrivals-spaceVerified publisher3.1.21.6.18

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.