ghcr.io/rodg/nodecg-base:latest container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/rodg/nodecg-base
ghcr.io/rodg/nodecg-base:latest resolved to 31be4bf87070, scanned 14 Sept 2026: 229 findings, 0 critical, 5 on KEV; deployed by 1 chart, among them nodecg-chart.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
229 distinct on this digest
Findings for digest 31be4bf87070 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| High | GHSA-r5fr-rjxr-66jc | lodash.template | 4.18.0 |
| High | GHSA-35jh-r3h4-6jhm | lodash.template | no fix listed |
| High | DLA-4104-1KEV | freetype | 2.10.4+dfsg-1+deb11u2 |
| High | DLA-4323-1KEV | git | 1:2.30.2-1+deb11u5 |
| High | DSA-5497-2KEV | libwebp | 0.6.1-2.1+deb11u2 |
| High | DSA-5514-1KEV | glibc | 2.31-13+deb11u7 |
| High | DSA-5570-1KEV | nghttp2 | 1.43.0-1+deb11u1 |
| Medium | DLA-3859-1 | systemd | 247.3-7+deb11u6 |
| Medium | DSA-5586-1 | openssh | 1:8.4p1-5+deb11u3 |
| Medium | DLA-4052-1 | postgresql-13 | 13.19-0+deb11u1 |
| Medium | DSA-5673-1 | glibc | 2.31-13+deb11u9 |
| Medium | DLA-3898-1 | nghttp2 | 1.43.0-1+deb11u2 |
| Medium | DSA-5523-1 | curl | 7.74.0-1.3+deb11u10 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | DLA-3942-1 | openssl | 1.1.1n-0+deb11u6 |
| Medium | DLA-3942-2 | openssl | 1.1.1w-0+deb11u2 |
| Medium | DLA-3867-1 | git | 1:2.30.2-1+deb11u3 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 4.0.4 |
| Medium | DLA-3980-1 | python3.9 | 3.9.2-1+deb11u2 |
| Medium | GHSA-5j98-mcp5-4vw2 | glob | 10.5.0 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 7.5.2 |
| Medium | GHSA-43fc-jf86-j433 | axios | 1.13.5 |
| Medium | GHSA-pq67-2wwv-3xjx | tar-fs | 2.1.2 |
| Medium | GHSA-35jp-ww65-95wh | axios | 1.16.0 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-3h5v-q93c-6h6q | ws | 8.17.1 |
| Medium | DLA-4087-1 | python3.9 | 3.9.2-1+deb11u3 |
| Medium | GHSA-jr5f-v2jv-69x6 | axios | 1.8.2 |
| Medium | GHSA-95m3-7q98-8xr5 | sha.js | 2.4.12 |
| Medium | GHSA-8hc4-vh64-cxmj | axios | 1.7.4 |
| Medium | DLA-4057-1 | openssh | 1:8.4p1-5+deb11u4 |
| Medium | GHSA-4hjh-wcwx-xvwj | axios | 1.12.0 |
| Medium | GHSA-5528-5vmv-3xc2 | multer | 2.1.1 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-v52c-386h-88mc | multer | 2.1.0 |
| Medium | GHSA-xf7r-hgr6-v32p | multer | 2.1.0 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | GHSA-8cj5-5rvv-wf4v | tar-fs | 2.1.3 |
| Medium | DLA-4445-1 | python3.9 | 3.9.2-1+deb11u4 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 7.0.5 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 1.16.0 |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 8.21.0 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Medium | GHSA-pf86-5x62-jrwf | axios | 1.15.1 |
| Medium | GHSA-677m-j7p3-52f9 | socket.io-parser | 4.2.6 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| nodecg-chartmarathon-charts | 0.1.5 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.