ghcr.io/runwhen-contrib/runwhen-local:0.12.4 container image

GitHub Container Registry

Scanned 11 Oct 2026

Deployed by 1 of 18,090 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/runwhen-contrib/runwhen-local

ghcr.io/runwhen-contrib/runwhen-local:0.12.4 resolved to 914e75d9f445, scanned 11 Oct 2026: 352 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them runwhen-local.

Radar Score

3,8070148302

352 findings on digest 914e75d9f445 · scanned 11 Oct 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.12.4resolves to	914e75d9f445	1 chart	yesterday	0148302	3,807

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

302 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 914e75d9f445 as scanned on 11 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 11 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-76957	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.47.0	0.55.0
Low	DEBIAN-CVE-2026-16599	wget@1.25.0-2	no fix listed
Low	GHSA-5p39-cfhj-2xmp	anyio@4.13.0	4.14.2
Low	GO-2026-4340	stdlib@go1.25.5	1.24.12
Low	DEBIAN-CVE-2023-31438	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-15534	perl@5.40.1-6+deb13u1	no fix listed
Low	GHSA-8wjv-2p76-3863	pyjwt@2.13.0	2.14.0
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@5.0.9	5.0.12
Low	DEBIAN-CVE-2026-73072	vim@2:9.1.1230-2	no fix listed
Low	GHSA-54p9-h82j-f925	multidict@6.7.1	6.9.1
Low	DEBIAN-CVE-2026-56392	coreutils@9.7-3	no fix listed
Low	GHSA-537c-gmf6-5ccf	cryptography@48.0.0	48.0.1
Low	PYSEC-2026-248	starlette@0.46.2	1.3.0
Low	DEBIAN-CVE-2026-58045	nodejs@26.11.1-1nodesource1	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-28418	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-12345	python3.13@3.13.5-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2017-18018	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2025-10966	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-11850	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-15146	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-54370	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2026-45130	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-32249	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	GHSA-xpv3-w29h-x7cv	oauthlib@3.3.1	4.0.0
Low	DEBIAN-CVE-2026-86805	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-73070	vim@2:9.1.1230-2	no fix listed
Low	GO-2026-4869	stdlib@go1.25.5	1.25.9
Low	GO-2026-6599	stdlib@go1.25.5	1.26.9
Low	GO-2026-6600	stdlib@go1.25.5	1.26.9
Low	GO-2026-6617	stdlib@go1.25.5	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.57.0	0.60.0
Low	DEBIAN-CVE-2026-73074	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2025-14017	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-57452	vim@2:9.1.1230-2	no fix listed
Low	GHSA-4xgf-cpjx-pc3j	pydantic-settings@2.14.1	2.14.2
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-15059	systemd@257.13-1~deb13u1	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
runwhen-localrunwhen-contribVerified publisher	0.7.2	0.12.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.