ghcr.io/substra/substra-backend:1.0.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/substra/substra-backend
ghcr.io/substra/substra-backend:1.0.1 resolved to 21967f54ec86, scanned 14 Sept 2026: 234 findings, 0 critical; deployed by 1 chart, among them substra-backend.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
234 distinct on this digest
Findings for digest 21967f54ec86 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-m4p7-r5rc-7g4j | pyasn1 | 0.6.4 |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | GHSA-8qvm-5x2c-j2w7 | protobuf | 5.29.5 |
| Low | GHSA-8ppf-4f7h-5ppj | pyasn1 | 0.6.4 |
| Low | GHSA-hm4w-wwcw-mr6r | pyasn1 | 0.6.4 |
| Low | UBUNTU-CVE-2026-4437 | glibc | 2.39-0ubuntu8.8 |
| Low | GHSA-6426-9fv3-65x8 | django | 4.2.28 |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GHSA-prg7-hcfm-mfcr | sqlparse | 0.6.0 |
| Low | UBUNTU-CVE-2016-2781 | coreutils | no fix listed |
| Low | GHSA-8rrh-rw8j-w5fx | wheel | 0.46.2 |
| Low | UBUNTU-CVE-2026-42767 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2026-48962 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GHSA-752w-5fwx-jx9f | pyjwt | 2.12.0 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | PYSEC-2026-3554 | cryptography | 49.0.0 |
| Low | UBUNTU-CVE-2025-40909 | perl | 5.38.2-3.2ubuntu0.2 |
| Low | GHSA-p3fp-8748-vqfq | django | 4.2.20 |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.0.13-0ubuntu3.15 |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.8.3-1.1ubuntu3.5 |
| Low | UBUNTU-CVE-2026-6238 | glibc | 2.39-0ubuntu8.8 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | UBUNTU-CVE-2026-5435 | glibc | 2.39-0ubuntu8.8 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | UBUNTU-CVE-2026-7017 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2025-0395 | glibc | 2.39-0ubuntu8.4 |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-4598 | systemd | 255.4-1ubuntu8.8 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 3.0.13-0ubuntu3.7 |
| Low | GHSA-8qcx-xf44-272x | django | 5.2.16 |
| Low | GHSA-rqw2-ghq9-44m7 | django | 4.2.27 |
| Low | UBUNTU-CVE-2025-68973 | gnupg2 | 2.4.4-2ubuntu17.4 |
| Low | UBUNTU-CVE-2026-34743 | xz-utils | 5.6.1+really5.4.5-1ubuntu0.3 |
| Low | UBUNTU-CVE-2026-54411 | pam | 1.5.3-5ubuntu5.6 |
| Low | GHSA-pq67-6m6q-mj2v | urllib3 | 2.5.0 |
| Low | UBUNTU-CVE-2026-19487 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-4878 | libcap2 | 1:2.66-5ubuntu2.4 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | GHSA-9wx4-h78v-vm56 | requests | 2.32.0 |
| Low | GHSA-2m8g-3cmr-wg3w | djangorestframework | 3.17.2 |
| Low | PYSEC-2025-183 | pyjwt | no fix listed |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-w7vc-732c-9m39 | pyjwt | 2.13.0 |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | 1.10.3-2ubuntu0.1 |
| Low | GHSA-48p4-8xcf-vxj5 | urllib3 | 2.5.0 |
| Low | UBUNTU-CVE-2025-5702 | glibc | 2.39-0ubuntu8.5 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | 2.39.3-9ubuntu6.6 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| substra-backendsubstraVerified publisher | 26.15.3 | 1.0.1 | 12 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.