ghcr.io/stirling-tools/stirling-pdf:2.14.3 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/stirling-tools/stirling-pdf
ghcr.io/stirling-tools/stirling-pdf:2.14.3 resolved to 3b3670fce70b, scanned 14 Sept 2026: 615 findings, 0 critical; deployed by 1 chart, among them stirling-pdf.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
615 distinct on this digest
Findings for digest 3b3670fce70b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | UBUNTU-CVE-2025-15273 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2025-15275 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2025-15280 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2025-15272 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2025-15274 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2025-69720 | ncurses | 6.4+20240113-1ubuntu2.1 |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http2 | 4.2.13.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.2.13.Final |
| Medium | UBUNTU-CVE-2026-8376 | perl | 5.38.2-3.2ubuntu0.3 |
| Medium | UBUNTU-CVE-2024-31578 | ffmpeg | 7:6.1.1-3ubuntu5+esm1 |
| Medium | UBUNTU-CVE-2018-18064 | cairo | no fix listed |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.2.16.Final |
| Medium | UBUNTU-CVE-2026-34877 | mbedtls | no fix listed |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | UBUNTU-CVE-2026-75143 | ffmpeg | 7:6.1.1-3ubuntu5+esm13 |
| Medium | UBUNTU-CVE-2026-8927 | curl | 8.5.0-2ubuntu10.10 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | UBUNTU-CVE-2026-9669 | python3.12 | 3.12.3-1ubuntu0.15 |
| Medium | UBUNTU-CVE-2026-28388 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | GHSA-hf6x-8p5f-cgmf | httpcore5 | 5.4.3 |
| Medium | GHSA-v3jc-474w-2wm6 | httpcore5-h2 | 5.4.3 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.2.15.Final |
| Medium | UBUNTU-CVE-2026-28387 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2026-11940 | python3.12 | no fix listed |
| Medium | UBUNTU-CVE-2025-15269 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2026-34875 | mbedtls | no fix listed |
| Medium | UBUNTU-CVE-2026-26740 | giflib | 5.2.2-1ubuntu1.2 |
| Medium | UBUNTU-CVE-2026-28389 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2026-28390 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2026-33845 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-57433 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | 1.16.6 |
| Low | UBUNTU-CVE-2026-6653 | libxml2 | 2.9.14+dfsg-1.3ubuntu3.8 |
| Low | UBUNTU-CVE-2026-27135 | nghttp2 | 1.59.0-1ubuntu0.3 |
| Low | UBUNTU-CVE-2026-13221 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-42496 | perl | 5.38.2-3.2ubuntu0.3 |
| Low | UBUNTU-CVE-2026-33636 | libpng1.6 | 1.6.43-5ubuntu0.6 |
| Low | UBUNTU-CVE-2026-44950 | libxfont | no fix listed |
| Low | GHSA-2fvj-hgj9-j2gr | jetty-security | 12.1.10 |
| Low | UBUNTU-CVE-2026-6100 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2017-7475 | cairo | no fix listed |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.2.13.Final |
| Low | UBUNTU-CVE-2018-1000520 | mbedtls | no fix listed |
| Low | UBUNTU-CVE-2026-59679 | libxfont | no fix listed |
| Low | UBUNTU-CVE-2026-9076 | openssl | 3.0.13-0ubuntu3.11 |
| Low | GHSA-62p4-gmf7-7g93 | pillow | 12.3.0 |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-4224 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2024-7055 | ffmpeg | 7:6.1.1-3ubuntu5+esm5 |
| Low | UBUNTU-CVE-2026-7210 | python3.12 | no fix listed |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| stirling-pdfrubxkubeVerified publisher | 0.1.2 | 2.14.3 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.