ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon
ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
413 distinct on this digest
Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-r55c-59qm-vjw6 | rexml | 3.3.3 |
| Medium | GHSA-g857-hhfv-j68w | zlib | 3.0.1 |
| Medium | GHSA-hwj9-h5mp-3pm3 | postcss | 7.0.36 |
| Medium | GHSA-jr5f-v2jv-69x6 | axios | 1.8.2 |
| Medium | GHSA-95m3-7q98-8xr5 | sha.js | 2.4.12 |
| Medium | GHSA-8hc4-vh64-cxmj | axios | 1.7.4 |
| Medium | GHSA-5866-49gr-22v4 | rexml | 3.3.3 |
| Medium | GHSA-gjh7-p2fx-99vx | rack | 2.2.14 |
| Medium | GHSA-7wqh-767x-r66v | rack | 2.2.13 |
| Medium | GHSA-4hjh-wcwx-xvwj | axios | 1.12.0 |
| Medium | GHSA-9xrj-h377-fr87 | activestorage | 7.2.3.1 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-xvcm-6775-5m9r | immutable | 4.3.9 |
| Medium | GHSA-73f9-jhhh-hr5m | activestorage | 7.2.3.1 |
| Medium | GHSA-67hx-6x53-jw92 | @babel/ | 7.23.2 |
| Medium | GHSA-2j26-frm8-cmj9 | activesupport | 7.2.3.1 |
| Medium | GHSA-r46p-8f7g-vvvg | activestorage | 7.2.3.1 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 1.9.0 |
| Medium | GHSA-p543-xpfm-54cp | rack | 2.2.19 |
| Medium | GHSA-wpv5-97wm-hp9c | rack | 2.2.19 |
| Medium | GHSA-cpq7-6gpm-g9rc | cipher-base | 1.0.5 |
| Medium | GHSA-566m-qj78-rww5 | postcss | 7.0.36 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 1.16.0 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 7.5.11 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 5.1.7 |
| Medium | GHSA-pf86-5x62-jrwf | axios | 1.15.1 |
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-rhx6-c78j-4q9w | path-to-regexp | 0.1.12 |
| Low | GHSA-7g2v-jj9q-g3rg | rack | 2.2.11 |
| Low | GHSA-v62p-rq8g-8h59 | pbkdf2 | 3.1.3 |
| Low | GHSA-62hf-57xw-28j9 | axios | 1.15.1 |
| Low | GHSA-h7cp-r72f-jxh6 | pbkdf2 | 3.1.3 |
| Low | GHSA-9v8j-x534-2fx3 | ruby-saml | 1.18.0 |
| Low | GHSA-vg3r-rm7w-2xgh | rexml | 3.2.7 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GHSA-q8qp-cvcw-x6jj | axios | 1.15.2 |
| Low | GHSA-3g43-6gmg-66jw | axios | 1.15.2 |
| Low | GHSA-cxjh-pqwp-8mfp | follow-redirects | 1.15.6 |
| Low | GHSA-h8w8-99g7-qmvj | concurrent-ruby | 1.3.7 |
| Low | GHSA-hfxv-24rg-xrqf | axios | 1.16.0 |
| Low | GHSA-2cw7-v8ff-p88r | oj | 3.17.3 |
| Low | GHSA-475m-ph3x-64gp | oj | 3.17.3 |
| Low | GHSA-9cv6-qcjw-4grx | oj | 3.17.3 |
| Low | GHSA-m578-w5vf-rfcm | oj | 3.17.3 |
| Low | GHSA-vwm4-62gf-x745 | oj | 3.17.3 |
| Low | DLA-3954-1 | postgresql-13 | 13.17-0+deb11u1 |