StackRadar

ghcr.io/star-whale/server:0.6.15 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/star-whale/server

ghcr.io/star-whale/server:0.6.15 resolved to 8368359c8dd0, scanned 14 Sept 2026: 826 findings, 17 critical, 3 on KEV; deployed by 1 chart, among them starwhale.

Radar Score

13,4861739229540

826 findings on digest 8368359c8dd0 · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.6.15resolves to8368359c8dd01 chart8 days ago173922954013,486

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

540 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 8368359c8dd0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2022-39399openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.04
LowGHSA-4q2v-9p7v-3v22reactor-netty-http@1.0.261.2.8
LowUBUNTU-CVE-2024-28085util-linux@2.34-0.1ubuntu9.32.34-0.1ubuntu9.6
LowGHSA-xmv7-r254-6q78netty-resolver-dns@4.1.86.Final4.1.135.Final
LowGHSA-4773-3jfm-qmx3spring-webflux@5.3.24no fix listed
LowGHSA-4773-3jfm-qmx3spring-webmvc@5.3.24no fix listed
LowUBUNTU-CVE-2026-60147openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.32+9-1ubuntu1~20.04
LowUBUNTU-CVE-2022-21624openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.04
LowGHSA-p9jm-q85p-7mcpnetty-codec-redis@4.1.86.Final4.1.136.Final
LowUBUNTU-CVE-2023-43786libx11@2:1.6.9-2ubuntu1.22:1.6.9-2ubuntu1.6
LowUBUNTU-CVE-2023-43786libxpm@1:3.5.12-11:3.5.12-1ubuntu0.20.04.2
LowUBUNTU-CVE-2024-22365pam@1.3.1-5ubuntu4.31.3.1-5ubuntu4.7
LowGHSA-jfg9-48mv-9qgxnetty-codec-mqtt@4.1.86.Final4.1.133.Final
LowGHSA-c69g-56f8-xwqjnetty-codec-http2@4.1.86.Final4.1.136.Final
LowUBUNTU-CVE-2026-22796openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm2
LowGHSA-72pg-x5f8-j25jspring-webmvc@5.3.24no fix listed
LowGHSA-72pg-x5f8-j25jspring-webflux@5.3.24no fix listed
LowUBUNTU-CVE-2023-22049openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.20+8-1ubuntu1~20.04
LowUBUNTU-CVE-2026-24401avahi@0.7-4ubuntu7.10.7-4ubuntu7.3+esm2
LowGHSA-hjcp-jmpx-g3qmhttpclient5@5.1.45.6.3
LowUBUNTU-CVE-2025-3576krb5@1.17-6ubuntu4.11.17-6ubuntu4.11
LowUBUNTU-CVE-2025-68973gnupg2@2.2.19-3ubuntu2.22.2.19-3ubuntu2.5+esm1
LowUBUNTU-CVE-2026-11979libxml2@2.9.10+dfsg-5ubuntu0.20.04.4no fix listed
LowUBUNTU-CVE-2022-3821systemd@245.4-4ubuntu3.18245.4-4ubuntu3.20
LowUBUNTU-CVE-2026-86140libxml2@2.9.10+dfsg-5ubuntu0.20.04.4no fix listed
LowGHSA-mq64-j8f9-9gcjspring-webflux@5.3.24no fix listed
LowGHSA-mq64-j8f9-9gcjspring-webmvc@5.3.24no fix listed
LowUBUNTU-CVE-2024-21011openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.23+9-1ubuntu1~20.04.2
LowUBUNTU-CVE-2023-21843openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.18+10-0ubuntu1~20.04.1
LowGHSA-38f8-5428-x5cvnetty-codec-http@4.1.86.Final4.1.133.Final
LowGHSA-5m4m-73w9-8433spring-data-commons@2.7.6no fix listed
LowGHSA-xq3w-v528-46rvnetty-common@4.1.86.Final4.1.115.Final
LowUBUNTU-CVE-2023-39804tar@1.30+dfsg-7ubuntu0.20.04.21.30+dfsg-7ubuntu0.20.04.4
LowGHSA-8c42-7qj2-3j46netty-codec-http@4.1.86.Final4.1.137.Final
LowUBUNTU-CVE-2026-34743xz-utils@5.2.4-1ubuntu1.15.2.4-1ubuntu1.1+esm1
LowUBUNTU-CVE-2023-22045openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.20+8-1ubuntu1~20.04
LowUBUNTU-CVE-2023-22041openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.20+8-1ubuntu1~20.04
LowGHSA-g7hg-vrcf-mvmrnetty-handler-ssl-ocsp@4.1.86.Final4.1.136.Final
LowGHSA-r7wm-3cxj-wff9jackson-core@2.4.02.18.8
LowUBUNTU-CVE-2024-21068openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.23+9-1ubuntu1~20.04.2
LowUBUNTU-CVE-2026-54411pam@1.3.1-5ubuntu4.3no fix listed
LowGHSA-3g8r-4pfx-jmfhnetty-codec-stomp@4.1.86.Final4.1.136.Final
LowUBUNTU-CVE-2024-21085openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.23+9-1ubuntu1~20.04.2
LowGHSA-389x-839f-4rhxnetty-common@4.1.86.Final4.1.118.Final
LowUBUNTU-CVE-2025-32414libxml2@2.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.10
LowUBUNTU-CVE-2023-32665glib2.0@2.64.6-1~ubuntu20.04.42.64.6-1~ubuntu20.04.6
LowUBUNTU-CVE-2025-30691openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.04
LowUBUNTU-CVE-2026-25210expat@2.2.9-1ubuntu0.42.2.9-1ubuntu0.8+esm1
LowUBUNTU-CVE-2023-1981avahi@0.7-4ubuntu7.10.7-4ubuntu7.2
LowUBUNTU-CVE-2023-22036openjdk-lts@11.0.16+8-0ubuntu1~20.0411.0.20+8-1ubuntu1~20.04

Used by

1 chart
ChartVersionTagContainers
starwhalestarwhaleVerified publisher0.6.150.6.151

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.