ghcr.io/substra/substra-backend:1.0.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/substra/substra-backend

ghcr.io/substra/substra-backend:1.0.1 resolved to 21967f54ec86, scanned 14 Sept 2026: 234 findings, 0 critical; deployed by 1 chart, among them substra-backend.

Radar Score

2,6180444186

234 findings on digest 21967f54ec86 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.0.1resolves to	21967f54ec86	1 chart	6 days ago	0444186	2,618

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

186 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 21967f54ec86 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.9
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.1	0.6.4
Low	GHSA-9hjg-9r4m-mvj7	requests@2.31.0	2.32.4
Low	GHSA-8qvm-5x2c-j2w7	protobuf@5.29.3	5.29.5
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.1	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.1	0.6.4
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8
Low	GHSA-6426-9fv3-65x8	django@4.2.16	4.2.28
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	GHSA-prg7-hcfm-mfcr	sqlparse@0.5.3	0.6.0
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6	no fix listed
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.43.0	0.46.2
Low	UBUNTU-CVE-2026-42767	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-48962	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	GHSA-752w-5fwx-jx9f	pyjwt@2.9.0	2.12.0
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6
Low	PYSEC-2026-3554	cryptography@43.0.1	49.0.0
Low	UBUNTU-CVE-2025-40909	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.2
Low	GHSA-p3fp-8748-vqfq	django@4.2.16	4.2.20
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2025-14831	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.5
Low	UBUNTU-CVE-2026-6238	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8
Low	GHSA-4xh5-x5gv-qwph	pip@24.0	25.3
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8
Low	GHSA-h35f-9h28-mq5c	setuptools@75.8.0	83.0.0
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2025-0395	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.4
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.2	no fix listed
Low	UBUNTU-CVE-2025-4598	systemd@255.4-1ubuntu8.4	255.4-1ubuntu8.8
Low	PYSEC-2026-3721	pip@24.0	26.2
Low	UBUNTU-CVE-2026-22796	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.7
Low	GHSA-8qcx-xf44-272x	django@4.2.16	5.2.16
Low	GHSA-rqw2-ghq9-44m7	django@4.2.16	4.2.27
Low	UBUNTU-CVE-2025-68973	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4
Low	UBUNTU-CVE-2026-34743	xz-utils@5.6.1+really5.4.5-1build0.1	5.6.1+really5.4.5-1ubuntu0.3
Low	UBUNTU-CVE-2026-54411	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.6
Low	GHSA-pq67-6m6q-mj2v	urllib3@2.3.0	2.5.0
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2build2	no fix listed
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.66-5ubuntu2	1:2.66-5ubuntu2.4
Low	GHSA-65pc-fj4g-8rjx	idna@3.10	3.15
Low	GHSA-9wx4-h78v-vm56	requests@2.31.0	2.32.0
Low	GHSA-2m8g-3cmr-wg3w	djangorestframework@3.15.2	3.17.2
Low	PYSEC-2025-183	pyjwt@2.9.0	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.2	no fix listed
Low	GHSA-w7vc-732c-9m39	pyjwt@2.9.0	2.13.0
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.1
Low	GHSA-48p4-8xcf-vxj5	urllib3@2.3.0	2.5.0

Used by

1 chart

Chart	Version	Tag	Containers
substra-backendsubstraVerified publisher	26.15.3	1.0.1	12

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.