ghcr.io/streamingfast/firehose-core:v1.12.3 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/streamingfast/firehose-core

ghcr.io/streamingfast/firehose-core:v1.12.3 resolved to 91fca773a63f, scanned 14 Sept 2026: 472 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them firehose-core.

Radar Score

4,6680451417

472 findings on digest 91fca773a63f · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v1.12.3resolves to	91fca773a63f	1 chart	8 days ago	0451417	4,668

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

417 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 91fca773a63f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2022-1143	stdlib@go1.18.5	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.40.0	0.52.0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.7
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.40.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.40.0	0.52.0
Low	GO-2024-2599	stdlib@go1.18.5	1.21.8
Low	UBUNTU-CVE-2025-10148	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	GO-2022-1038	stdlib@go1.18.5	1.18.7
Low	GO-2024-3106	stdlib@go1.18.5	1.22.7
Low	UBUNTU-CVE-2026-1965	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8
Low	GO-2023-1570	stdlib@go1.18.5	1.19.6
Low	UBUNTU-CVE-2025-68973	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3ubuntu3.6	no fix listed
Low	UBUNTU-CVE-2026-7168	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3ubuntu3.6	no fix listed
Low	GO-2024-2600	stdlib@go1.18.5	1.21.8
Low	UBUNTU-CVE-2025-15367	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.12
Low	UBUNTU-CVE-2026-59847	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.5
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.48.0	1.82.1
Low	UBUNTU-CVE-2026-3783	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8
Low	UBUNTU-CVE-2026-4873	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	GO-2024-2609	stdlib@go1.18.5	1.21.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.6.1+really5.4.5-1ubuntu0.2	5.6.1+really5.4.5-1ubuntu0.3
Low	GO-2024-3107	stdlib@go1.18.5	1.22.7
Low	GO-2023-1751	stdlib@go1.18.5	1.19.9
Low	GO-2023-1753	stdlib@go1.18.5	1.19.9
Low	UBUNTU-CVE-2026-54411	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.6
Low	UBUNTU-CVE-2026-84366	python3.12@3.12.3-1ubuntu0.9	no fix listed
Low	UBUNTU-CVE-2026-25210	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.66-5ubuntu2.2	1:2.66-5ubuntu2.4
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.40.0	0.52.0
Low	GO-2023-2041	stdlib@go1.18.5	1.20.8
Low	GO-2023-2043	stdlib@go1.18.5	1.20.8
Low	GO-2023-2186	stdlib@go1.18.5	1.20.11
Low	GO-2024-3333	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.35.0	1.40.0
Low	UBUNTU-CVE-2026-33947	jq@1.7.1-3ubuntu0.24.04.1	1.7.1-3ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.3	no fix listed
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.1
Low	GO-2024-3105	stdlib@go1.18.5	1.22.7
Low	GO-2022-1095	stdlib@go1.18.5	1.18.8
Low	UBUNTU-CVE-2026-49839	jq@1.7.1-3ubuntu0.24.04.1	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.39.3-9ubuntu6.3	2.39.3-9ubuntu6.6
Low	GO-2023-1621	stdlib@go1.18.5	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
Low	UBUNTU-CVE-2026-1489	glib2.0@2.80.0-6ubuntu3.4	2.80.0-6ubuntu3.8
Low	GO-2026-4981	stdlib@go1.24.10	1.25.10
Low	UBUNTU-CVE-2026-6019	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15

Used by

1 chart

Chart	Version	Tag	Containers
firehose-corenodeifyVerified publisher	1.2.6	v1.12.3	5

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.