ghcr.io/runwhen-contrib/runwhen-local:0.12.2 container image

GitHub Container Registry

Scanned 24 Sept 2026

Deployed by 1 of 17,837 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/runwhen-contrib/runwhen-local

ghcr.io/runwhen-contrib/runwhen-local:0.12.2 resolved to b0a48c74cdcb, scanned 24 Sept 2026: 313 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them runwhen-local.

Radar Score

3,1490136275

313 findings on digest b0a48c74cdcb · scanned 24 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.12.2resolves to	b0a48c74cdcb	1 chart	today	0136275	3,149

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

313 distinct on this digest

Findings for digest b0a48c74cdcb as scanned on 24 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 24 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-7f5h-v6xp-fcq8	starlette@0.46.2	0.49.1
Low	DEBIAN-CVE-2026-15308	python3.13@3.13.5-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-34982	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2021-31879	wget@1.25.0-2	no fix listed
Low	GHSA-82r6-8w77-94w6	anyio@4.13.0	4.14.2
Low	DEBIAN-CVE-2026-48937	nodejs@26.10.0-1nodesource1	no fix listed
Low	DEBIAN-CVE-2026-80230	curl@8.14.1-2+deb13u5	no fix listed
Low	PYSEC-2026-3951	gitpython@3.1.50	3.1.55
Low	DEBIAN-CVE-2026-58469	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-93990	expat@2.8.3-1~deb13u1	no fix listed
Low	PYSEC-2026-3982	gitpython@3.1.50	3.1.60
Low	DEBIAN-CVE-2026-73078	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-56846	nodejs@26.10.0-1nodesource1	no fix listed
Low	DEBIAN-CVE-2026-56848	nodejs@26.10.0-1nodesource1	no fix listed
Low	DEBIAN-CVE-2018-7738	bash-completion@1:2.16.0-7	no fix listed
Low	PYSEC-2026-3784	gitpython@3.1.50	3.1.58
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	GHSA-5rvq-cxj2-64vf	python-multipart@0.0.29	0.0.30
Low	GHSA-jpw9-pfvf-9f58	mcp@1.27.1	1.27.2
Low	GHSA-3f7w-8rr8-f37f	gitpython@3.1.50	3.1.57
Low	DEBIAN-CVE-2026-46483	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-82208	curl@8.14.1-2+deb13u5	no fix listed
Low	GHSA-fjr4-x663-mwxc	gitpython@3.1.50	3.1.54
Low	DEBIAN-CVE-2026-47162	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-48617	nodejs@26.10.0-1nodesource1	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-hvrp-rf83-w775	mcp@1.27.1	1.27.2
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u5	no fix listed
Low	GHSA-82w8-qh3p-5jfq	starlette@0.46.2	1.3.1
Low	DEBIAN-CVE-2026-52859	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u5	no fix listed
Low	GHSA-jwv3-5hgf-82ww	cryptography@48.0.0	49.0.0
Low	DEBIAN-CVE-2026-8286	curl@8.14.1-2+deb13u5	no fix listed
Low	GHSA-4gmw-gg2m-w46p	gitpython@3.1.50	3.1.58
Low	GHSA-wqp7-x3pw-xc5r	starlette@0.46.2	1.1.0
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.3	0.6.4
Low	DEBIAN-CVE-2026-41411	vim@2:9.1.1230-2	no fix listed
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.3	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.3	0.6.4
Low	GO-2026-4341	stdlib@go1.25.5	1.24.12
Low	DEBIAN-CVE-2026-44656	vim@2:9.1.1230-2	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
runwhen-localrunwhen-contribVerified publisher	0.6.18	0.12.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.