ghcr.io/substra/substra-backend:1.0.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/substra/substra-backend
ghcr.io/substra/substra-backend:1.0.1 resolved to 21967f54ec86, scanned 14 Sept 2026: 234 findings, 0 critical; deployed by 1 chart, among them substra-backend.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
234 distinct on this digest
Findings for digest 21967f54ec86 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | UBUNTU-CVE-2025-15467 | openssl | 3.0.13-0ubuntu3.7 |
| High | GHSA-frmv-pr5f-9mcr | django | 4.2.26 |
| High | GHSA-mwm9-4648-f68q | django | 4.2.28 |
| High | PYSEC-2025-105 | django | 4.2.24 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | GHSA-8j24-cjrq-gr2m | django | 4.2.21 |
| Medium | GHSA-m9g8-fxxm-xg86 | django | 4.2.17 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | PYSEC-2025-109 | django | 4.2.27 |
| Medium | GHSA-qw25-v68c-qjf3 | django | 4.2.26 |
| Medium | UBUNTU-CVE-2025-9230 | openssl | 3.0.13-0ubuntu3.6 |
| Medium | GHSA-gvg8-93h5-g6qq | django | 4.2.28 |
| Medium | PYSEC-2025-106 | django | 4.2.25 |
| Medium | GHSA-8498-2h75-472j | django | 4.2.17 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | UBUNTU-CVE-2026-63076 | openssl | 3.0.13-0ubuntu3.15 |
| Medium | UBUNTU-CVE-2026-33846 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | UBUNTU-CVE-2025-13151 | libtasn1-6 | 4.19.0-3ubuntu0.24.04.2 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | UBUNTU-CVE-2026-5450 | glibc | 2.39-0ubuntu8.8 |
| Medium | UBUNTU-CVE-2024-9143 | openssl | 3.0.13-0ubuntu3.5 |
| Medium | UBUNTU-CVE-2026-34182 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | PYSEC-2026-43 | django | 4.2.28 |
| Medium | PYSEC-2026-45 | django | 4.2.28 |
| Medium | UBUNTU-CVE-2026-31790 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2026-34180 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | PYSEC-2026-52 | django | 4.2.30 |
| Medium | UBUNTU-CVE-2025-31115 | xz-utils | 5.6.1+really5.4.5-1ubuntu0.2 |
| Medium | UBUNTU-CVE-2026-7383 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | UBUNTU-CVE-2025-69720 | ncurses | 6.4+20240113-1ubuntu2.1 |
| Medium | UBUNTU-CVE-2026-8376 | perl | 5.38.2-3.2ubuntu0.3 |
| Medium | PYSEC-2026-3717 | django | 5.2.17 |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | GHSA-qcgg-j2x8-h9g8 | django | 4.2.18 |
| Medium | UBUNTU-CVE-2026-28388 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2025-69421 | openssl | 3.0.13-0ubuntu3.7 |
| Medium | UBUNTU-CVE-2026-28387 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | GHSA-58pv-8j8x-9vj2 | jaraco-context | 6.1.0 |
| Medium | UBUNTU-CVE-2025-32988 | gnutls28 | 3.8.3-1.1ubuntu3.4 |
| Medium | UBUNTU-CVE-2026-28389 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2026-28390 | openssl | 3.0.13-0ubuntu3.9 |
| Medium | UBUNTU-CVE-2026-33845 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Low | UBUNTU-CVE-2025-69420 | openssl | 3.0.13-0ubuntu3.7 |
| Low | UBUNTU-CVE-2026-57433 | perl | 5.38.2-3.2ubuntu0.4 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| substra-backendsubstraVerified publisher | 26.15.3 | 1.0.1 | 12 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.