StackRadar

ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.6.1resolves to43b23d55e4be1 chart8 days ago18713335,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

413 distinct on this digest

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-cg4j-q9v8-6v38activesupport@6.1.7.27.2.3.1
LowGHSA-6chq-wfr3-2hj9axios@1.3.21.15.1
LowGHSA-h2jq-g4cq-5ppqrack@2.2.6.22.2.23
LowGHSA-r6q2-hw4h-h46wtar@6.1.117.5.4
LowGHSA-gh9q-2xrm-x6qvcgi@0.2.10.3.5.1
LowGHSA-2883-xcg3-v3hhjs-yaml@3.14.13.15.2
LowGHSA-3w6x-2g7m-8v23axios@1.3.21.15.2
LowGHSA-r292-9mhp-454mtar@6.1.117.5.21
LowGHSA-r4q5-vmmm-2653follow-redirects@1.15.21.16.0
LowGHSA-r28c-9q8g-f849postcss@7.0.328.5.18
LowGHSA-8vqr-qjwx-82mwrack@2.2.6.22.2.23
LowGHSA-xp5h-f8jf-rc8qactionview@6.1.7.26.1.7.3
LowGHSA-wf5p-g6vw-rhxxaxios@1.3.21.6.0
LowGHSA-c83g-rgw3-j3cxbrowserslist@4.21.44.28.7
LowGHSA-h27x-rffw-24p4addressable@2.8.12.9.0
LowDSA-5484-1librsvg@2.50.3+dfsg-12.50.3+dfsg-1+deb11u1
LowGHSA-w5hq-g745-h8pquuid@8.3.211.1.1
LowDLA-4251-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u8
LowDSA-5650-1util-linux@2.36.1-8+deb11u12.36.1-8+deb11u2
LowGHSA-592j-995h-p23jrdoc@6.3.36.3.4.1
LowDSA-5490-1aom@1.0.0.errata1-31.0.0.errata1-3+deb11u1
LowDLA-4026-1tiff@4.2.0-1+deb11u34.2.0-1+deb11u6
LowGHSA-9ppj-qmqm-q256tar@6.1.117.5.11
LowGHSA-3qc2-v3hp-6cv8sidekiq@6.5.86.5.10
LowGHSA-pj73-v5mw-pm9jactivesupport@6.1.7.26.1.7.3
LowGHSA-vcgp-9326-pqcpnet-imap@0.1.10.3.10
LowGHSA-fhx8-5c23-x7x5sidekiq-unique-jobs@7.1.297.1.33
LowGHSA-2p49-hgcm-8545svgo@1.3.22.8.3
LowGHSA-968p-4wvh-cqc8@babel/helpers@7.20.77.26.10
LowGHSA-968p-4wvh-cqc8@babel/runtime@7.0.07.26.10
LowGHSA-3p68-rc4w-qgx5axios@1.3.21.15.0
LowGHSA-rrqh-93c8-j966ruby-saml@1.13.01.18.1
LowDSA-5518-1libvpx@1.9.0-11.9.0-1+deb11u2
LowGHSA-7fh5-64p2-3v2jpostcss@7.0.328.4.31
LowGHSA-xwg4-73v4-xw9wnanoid@3.3.43.3.12
LowDSA-5726-1krb5@1.18.3-6+deb11u31.18.3-6+deb11u5
LowGHSA-p9fm-f462-ggrgactivestorage@6.1.7.27.2.3.1
LowGHSA-4xqq-m2hx-25v8rexml@3.2.53.3.2
LowGHSA-f886-m6hf-6m8vbrace-expansion@2.0.12.0.3
LowGHSA-2m96-52r3-2f3gfugit@1.7.11.11.1
LowDSA-5686-1dav1d@0.7.1-30.7.1-3+deb11u1
LowGHSA-3m6q-jj5j-38c9oj@3.13.233.17.3
LowGHSA-c4rq-3m3g-8wgxnokogiri@1.14.11.19.3
LowGHSA-48rx-c7pg-q66rexcon@0.95.01.5.0
LowGHSA-75xq-5h9v-w6pxnet-imap@0.1.10.4.24
LowDLA-3893-1expat@2.2.10-2+deb11u52.2.10-2+deb11u6
LowDSA-5622-1postgresql-13@13.9-0+deb11u113.14-0+deb11u1
LowGHSA-9cv2-cfxc-v4v2nokogiri@1.14.11.19.4
LowGHSA-phwj-rprq-35ppnokogiri@1.14.11.19.4
LowGHSA-ghhp-3qvg-889pwebsocket-driver@0.7.50.8.1

Used by

1 chart
ChartVersionTagContainers
mastodonrivals-spaceVerified publisher3.1.21.6.18

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.