ghcr.io/thoroslives/zilean:v3.10.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/thoroslives/zilean

ghcr.io/thoroslives/zilean:v3.10.1 resolved to bce6aca0f6ca, scanned 14 Sept 2026: 155 findings, 1 critical; deployed by 1 chart, among them zilean.

Radar Score

2,0251144109

155 findings on digest bce6aca0f6ca · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v3.10.1resolves to	bce6aca0f6ca	1 chart	6 days ago	1144109	2,025

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

155 distinct on this digest

Findings for digest bce6aca0f6ca as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2024-3094	xz@5.4.3-r1	5.6.1-r2
High	ALPINE-CVE-2024-32002	git@2.40.4-r0	2.45.1-r0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2024-12254	python3@3.11.12-r1	3.12.8-r1
Medium	ALPINE-CVE-2025-4517	python3@3.11.12-r1	3.12.11-r0
Medium	ALPINE-CVE-2026-19931	curl@8.12.1-r0	8.22.0-r0
Medium	GHSA-9v76-4qcc-frgh	Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.15	9.0.16
Medium	PYSEC-2025-49	setuptools@70.3.0	78.1.1
Medium	ALPINE-CVE-2026-9079	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2024-7592	python3@3.11.12-r1	3.12.6-r0
Medium	ALPINE-CVE-2024-6232	python3@3.11.12-r1	3.12.6-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2024-8088	python3@3.11.12-r1	3.12.5-r1
Medium	ALPINE-CVE-2026-10536	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18924	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-11856	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2024-32004	git@2.40.4-r0	2.45.1-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-58050	pcre2@10.42-r1	10.46-r0
Medium	ALPINE-CVE-2025-48385	git@2.40.4-r0	2.50.1-r0
Medium	ALPINE-CVE-2025-4138	python3@3.11.12-r1	3.12.11-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-59375	expat@2.7.0-r0	2.7.2-r0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2024-32465	git@2.40.4-r0	2.45.1-r0
Medium	GHSA-rp2p-6cmp-jxj9	Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15	9.0.18
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2024-4032	python3@3.11.12-r1	3.12.6-r0
Medium	GHSA-m93f-wj8c-rp8p	Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15	9.0.19
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-6100	python3@3.11.12-r1	3.12.14-r0
Medium	GHSA-cvvh-rhrc-wg4q	Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15	9.0.18
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2025-31115	xz@5.4.3-r1	5.8.1-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-8924	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-4330	python3@3.11.12-r1	3.12.11-r0
Medium	ALPINE-CVE-2026-80231	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2025-0938	python3@3.11.12-r1	3.12.9-r0
Medium	ALPINE-CVE-2026-66046	expat@2.7.0-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-8927	curl@8.12.1-r0	8.22.0-r0
Medium	ALPINE-CVE-2023-27043	python3@3.11.12-r1	3.12.6-r0
Medium	ALPINE-CVE-2024-32021	git@2.40.4-r0	2.45.1-r0
Medium	ALPINE-CVE-2026-11940	python3@3.11.12-r1	3.12.14-r0
Medium	GHSA-wp74-jgxh-gv4q	Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15	9.0.18
Low	ALPINE-CVE-2026-8926	curl@8.12.1-r0	8.22.0-r0
Low	ALPINE-CVE-2025-46835	git@2.40.4-r0	2.50.1-r0
Low	ALPINE-CVE-2026-27135	nghttp2@1.57.0-r0	1.68.1
Low	GHSA-qvw7-jm5c-6hqw	Microsoft.NETCore.App.Runtime.linux-musl-x64@9.0.15	9.0.18

Used by

1 chart

Chart	Version	Tag	Containers
zileank8s-home-lab-repo	1.0.1	v3.10.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.