StackRadar

ghcr.io/star-whale/server:0.6.15 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/star-whale/server

ghcr.io/star-whale/server:0.6.15 resolved to 8368359c8dd0, scanned 14 Sept 2026: 826 findings, 17 critical, 3 on KEV; deployed by 1 chart, among them starwhale.

Radar Score

13,4861739229540

826 findings on digest 8368359c8dd0 · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.6.15resolves to8368359c8dd01 chart8 days ago173922954013,486

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

826 distinct on this digest

Findings for digest 8368359c8dd0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighGHSA-gww7-p5w4-wrfvjackson-databind@2.4.02.6.7.4
HighGHSA-h592-38cm-4ggpjackson-databind@2.4.02.6.7.3
HighGHSA-6fpp-rgj9-8rwcjackson-databind@2.4.02.7.9.6
HighGHSA-27hp-xhwr-wr2mtomcat-embed-core@9.0.709.0.98
HighGHSA-cqqj-4p63-rrmmnetty@3.10.6.Finalno fix listed
HighGHSA-5r5r-6hpj-8gg9jackson-databind@2.4.02.9.10.8
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@5.3.24no fix listed
MediumGHSA-cx7f-g6mp-7hqmspring-webflux@5.3.24no fix listed
MediumGHSA-f9xh-2qgp-cq57jackson-databind@2.4.02.6.7.5
MediumGHSA-m6x4-97wx-4q27jackson-databind@2.4.02.9.10.8
MediumGHSA-fqwf-pjwf-7vqvjackson-databind@2.4.02.6.7.4
MediumGHSA-3f7h-mf4q-vrm4woodstox-core@5.0.35.4.0
MediumGHSA-qr7j-h6gg-jmgcjackson-databind@2.4.02.7.9.4
MediumGHSA-mx7p-6679-8g3qjackson-databind@2.4.02.6.7.3
MediumGHSA-r3gr-cxrf-hg25jackson-databind@2.4.02.9.10.8
MediumGHSA-gjmw-vf9h-g25vjackson-databind@2.4.02.6.7.3
MediumGHSA-h3cw-g4mq-c5x2jackson-databind@2.4.02.9.10.6
MediumGHSA-85cw-hj65-qqv9jackson-databind@2.4.02.6.7.3
MediumGHSA-fmmc-742q-jg75jackson-databind@2.4.02.6.7.3
MediumGHSA-gwp4-hfv6-p7hwjackson-databind@2.4.02.6.7.3
MediumUBUNTU-CVE-2022-42898krb5@1.17-6ubuntu4.11.17-6ubuntu4.2
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.4.02.8.11.5
MediumUBUNTU-CVE-2021-36222krb5@1.17-6ubuntu4.11.17-6ubuntu4.3
MediumUBUNTU-CVE-2024-5535openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.23
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.4.02.9.10.8
MediumGHSA-gx2c-fvhc-ph4jhadoop-common@2.10.12.10.2
MediumGHSA-5949-rw7g-wx7wjackson-databind@2.4.02.6.7.5
MediumGHSA-8wm5-8h9c-47pchadoop-common@2.10.12.10.2
MediumGHSA-qjw2-hr98-qgfhjackson-databind@2.4.02.6.7.5
MediumGHSA-wm47-8v5p-wjpjnetty@3.10.6.Finalno fix listed
MediumGHSA-w3f4-3q6j-rh82jackson-databind@2.4.02.7.9.5
MediumGHSA-p979-4mfw-53vgnetty@3.10.6.Finalno fix listed
MediumUBUNTU-CVE-2022-4304openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.17
MediumUBUNTU-CVE-2022-40304libxml2@2.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.5
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.4.02.7.9.4
MediumGHSA-r7pg-v2c8-mfg3avro@1.7.71.11.4
MediumUBUNTU-CVE-2019-1010022glibc@2.31-0ubuntu9.9no fix listed
MediumGHSA-3h6f-g5f3-gc4wspring-security-config@5.7.65.7.10
MediumGHSA-rmpj-7c96-mrg8hadoop-common@2.10.12.10.2
MediumGHSA-9vjp-v76f-g363netty@3.10.6.Finalno fix listed
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.4.02.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.4.02.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.4.02.9.10.8
MediumUBUNTU-CVE-2021-33574glibc@2.31-0ubuntu9.9no fix listed
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.4.02.6.7.5
MediumGHSA-89qr-369f-5m5xjackson-databind@2.4.02.6.7.5
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.4.02.6.7.5
MediumGHSA-7phw-cxx7-q9vqspring-webmvc@5.3.245.3.26
MediumGHSA-vfqx-33qm-g869jackson-databind@2.4.02.6.7.5
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.4.02.6.7.5

Used by

1 chart
ChartVersionTagContainers
starwhalestarwhaleVerified publisher0.6.150.6.151

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.