StackRadar

ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.6.1resolves to43b23d55e4be1 chart8 days ago18713335,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

333 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDLA-4146-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u7
LowGHSA-ghr5-ch3p-vcr6ejs@3.1.83.1.10
LowDLA-4176-1openssl@1.1.1n-0+deb11u41.1.1w-0+deb11u3
LowGHSA-4mjr-xmp4-gh2gqs@6.11.06.16.0
LowGHSA-c8v6-786g-vjx6json-jwt@1.15.31.15.3.1
LowDLA-4448-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u9
LowDLA-4489-1libvpx@1.9.0-11.9.0-1+deb11u5
LowDLA-3930-1libsepol@3.1-13.1-1+deb11u1
LowGHSA-vgpv-f759-9wx3rack@2.2.6.22.2.23
LowGHSA-48c2-rrv3-qjmpyaml@1.10.21.10.3
LowGHSA-wx95-c6cv-8532nokogiri@1.14.11.19.1
LowDLA-4440-1ffmpeg@7:4.3.5-0+deb11u17:4.3.9-0+deb11u2
LowGHSA-xx6v-rp6x-q39caxios@1.3.21.15.1
LowGHSA-7mqq-6cf9-v2qprack@2.2.6.22.2.23
LowDLA-4181-1glibc@2.31-13+deb11u52.31-13+deb11u13
LowDLA-4139-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u5
LowGHSA-whrj-4476-wvmprack@2.2.6.22.2.22
LowGHSA-898c-q2cr-xwhgaxios@1.3.21.16.0
LowDLA-4241-1ffmpeg@7:4.3.5-0+deb11u17:4.3.9-0+deb11u1
LowDLA-4065-1krb5@1.18.3-6+deb11u31.18.3-6+deb11u6
LowGHSA-848j-6mx2-7j84elliptic@6.5.4no fix listed
LowGHSA-2xgq-q749-89fqaws-sdk-s3@1.119.01.208.0
LowDLA-4128-1glib2.0@2.66.8-12.66.8-1+deb11u6
LowGHSA-fm7p-mprw-wjm9oj@3.13.233.17.3
LowDLA-4306-1pam@1.4.0-9+deb11u11.4.0-9+deb11u2
LowGHSA-q4qf-9j86-f5mhrack@2.2.6.22.2.23
LowGHSA-ff6c-w6qf-7xqccss_parser@1.12.01.22.0
LowDLA-4130-1shadow@1:4.8.1-11:4.8.1-1+deb11u1
LowDSA-5361-1tiff@4.2.0-1+deb11u34.2.0-1+deb11u4
LowDLA-4217-1icu@67.1-767.1-7+deb11u1
LowDLA-4073-1ffmpeg@7:4.3.5-0+deb11u17:4.3.8-0+deb11u3
LowDLA-4396-1libpng1.6@1.6.37-31.6.37-3+deb11u1
LowDLA-4491-1glib2.0@2.66.8-12.66.8-1+deb11u8
LowGHSA-46q3-7gv7-qmggnet-imap@0.1.10.5.15
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.2.01.3.7
LowGHSA-w7fw-mjwx-w883qs@6.11.06.14.2
LowDLA-4287-1libsndfile@1.0.31-21.0.31-2+deb11u1
LowGHSA-6rw7-vpxm-498pqs@6.11.06.14.1
LowDLA-4143-1glibc@2.31-13+deb11u52.31-13+deb11u12
LowDLA-3967-1mpg123@1.26.4-11.26.4-1+deb11u1
LowDLA-4195-1krb5@1.18.3-6+deb11u31.18.3-6+deb11u7
LowDLA-4420-1postgresql-13@13.9-0+deb11u113.23-0+deb11u1
LowGHSA-4g8v-vg43-wpgfactionpack@6.1.7.26.1.7.4
LowGHSA-v422-hmwv-36x6body-parser@1.20.11.20.6
LowGHSA-9wjq-cp2p-hrgfloofah@2.19.12.25.2
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@2.0.12.0.2
LowGHSA-vpfw-47h7-xj4grack@2.2.6.22.2.14
LowDLA-4424-1openjpeg2@2.4.0-32.4.0-3+deb11u2
LowGHSA-22h5-pq3x-2gf2uri@0.10.10.11.3
LowGHSA-q2ww-5357-x388rack@2.2.6.22.2.23

Used by

1 chart
ChartVersionTagContainers
mastodonrivals-spaceVerified publisher3.1.21.6.18

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.