StackRadar

ghcr.io/rivals-space/rivals-mastodon:1.6.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rivals-space/rivals-mastodon

ghcr.io/rivals-space/rivals-mastodon:1.6.1 resolved to 43b23d55e4be, scanned 14 Sept 2026: 413 findings, 1 critical, 4 on KEV; deployed by 1 chart, among them mastodon.

Radar Score

5,0971871333

413 findings on digest 43b23d55e4be · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.6.1resolves to43b23d55e4be1 chart8 days ago18713335,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

413 distinct on this digest

Findings for digest 43b23d55e4be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-fxqj-rqcc-2cmppostcss@7.0.328.5.23
LowDLA-4402-1libsndfile@1.0.31-21.0.31-2+deb11u2
LowGHSA-2vqw-3mp8-cgmxpuma@5.6.57.2.1
LowGHSA-33ph-fccm-39pjwebsocket-driver@0.7.50.8.1
LowGHSA-9ppp-w3g4-fh4qoj@3.13.233.17.3
LowGHSA-q2gm-54r6-8fwmoj@3.13.233.17.3
LowGHSA-35w3-pjm6-wj95oj@3.13.233.17.3
LowGHSA-42h9-826w-cgv3axios@1.3.21.18.0
LowGHSA-pmv8-rq9r-6j72axios@1.3.21.18.0
LowGHSA-5prr-v3j2-97mhnokogiri@1.14.11.19.4
LowDSA-5433-1libx11@2:1.7.2-12:1.7.2-1+deb11u1
LowGHSA-fwhr-88qx-h9g7actionpack@6.1.7.26.1.7.8
LowGHSA-83g3-92jg-28cxtar@6.1.117.5.8
LowGHSA-j3g3-5qv5-52mjnet-imap@0.1.10.2.5
LowGHSA-9hf4-67fc-4vf4puma@5.6.55.6.9
LowGHSA-p67v-3w7g-wjg7nokogiri@1.14.11.19.4
LowGHSA-wjv4-x9w8-wm3hnokogiri@1.14.11.19.4
LowDSA-5746-1postgresql-13@13.9-0+deb11u113.16-0+deb11u1
LowGHSA-cvp8-5r8g-fhvqomniauth-saml@1.10.31.10.5
LowDLA-4107-1openjpeg2@2.4.0-32.4.0-3+deb11u1
LowDLA-4321-1openssl@1.1.1n-0+deb11u41.1.1w-0+deb11u4
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowDLA-3928-1ffmpeg@7:4.3.5-0+deb11u17:4.3.8-0+deb11u1
LowDLA-4385-1libssh@0.9.5-1+deb11u10.9.8-0+deb11u2
LowGHSA-c32j-vqhx-rx3xjwt@2.5.02.10.3
LowGHSA-qj8w-gfj5-8c6vserialize-javascript@5.0.17.0.5
LowDSA-5721-1ffmpeg@7:4.3.5-0+deb11u17:4.3.7-0+deb11u1
LowGHSA-w8wr-v893-vjvptar@6.1.117.5.18
LowGHSA-8p34-64r3-mwg8net-imap@0.1.10.5.15
LowGHSA-qjxf-mc72-wjr2devise-two-factor@4.0.26.0.0
LowGHSA-m7pr-hjqh-92cmaxios@1.3.21.15.1
LowGHSA-f27w-vcwj-c954bcrypt@3.1.173.1.22
LowGHSA-49q7-c7j4-3p7melliptic@6.5.46.5.7
LowDSA-5394-1ffmpeg@7:4.3.5-0+deb11u17:4.3.6-0+deb11u1
LowGHSA-r657-rxjc-j557rack@2.2.6.22.2.20
LowDSA-5349-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u3
LowDSA-5567-1tiff@4.2.0-1+deb11u34.2.0-1+deb11u5
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowGHSA-mrxw-mxhj-p664nokogiri@1.14.11.18.4
LowGHSA-mmx7-hfxf-jppxaxios@1.3.21.18.0
LowDLA-4064-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u6
LowDLA-4257-1libcaca@0.99.beta19-2.20.99.beta19-2.2+deb11u1
LowGHSA-8j3g-f24p-4mpwwebsocket-driver@0.7.50.8.1
LowGHSA-353f-x4gh-cqq8nokogiri@1.14.11.18.9
LowGHSA-hw46-3hmr-x9xvomniauth-saml@1.10.31.10.6
LowMAL-2022-4691monorepo-symlink-test@0.0.0no fix listed
LowGHSA-5v8h-3h3q-446pnokogiri@1.14.11.19.4
LowGHSA-76r7-hhxj-r776activerecord@6.1.7.27.1.5.2
LowGHSA-xh69-987w-hrp8resolv@0.2.10.2.3
LowDSA-5409-1libssh@0.9.5-1+deb11u10.9.7-0+deb11u1

Used by

1 chart
ChartVersionTagContainers
mastodonrivals-spaceVerified publisher3.1.21.6.18

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.