ghcr.io/umami-software/umami:3.0.3 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/umami-software/umami
ghcr.io/umami-software/umami:3.0.3 resolved to 28f263fe06f7, scanned 14 Sept 2026: 188 findings, 0 critical; deployed by 1 chart, among them umami.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
39 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 28f263fe06f7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | GHSA-p293-qw3h-jr36 | next | 15.5.24 |
| Medium | GHSA-5j98-mcp5-4vw2 | glob | 10.5.0 |
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2025-11187 | openssl | 3.5.5-r0 |
| Medium | ALPINE-CVE-2026-9079 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-10536 | curl | 8.22.0-r0 |
| Medium | GHSA-m99w-x7hq-7vfj | next | 15.5.21 |
| Medium | GHSA-379q-355j-w6rj | pnpm | 10.26.0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | GHSA-267c-6grr-h53f | next | 15.5.16 |
| Medium | ALPINE-CVE-2026-11856 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-8925 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | GHSA-89xv-2m56-2m9x | next | 15.5.21 |
| Medium | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Medium | GHSA-p9j2-gv94-2wf4 | next | 15.5.21 |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | GHSA-w7jw-789q-3m8p | shell-quote | 1.8.4 |
| Medium | GHSA-2phv-j68v-wwqx | pnpm | 10.27.0 |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-8924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-8927 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.5.5-r0 |
| Medium | GHSA-hwx4-2j3j-g496 | pnpm | 10.34.0 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.5.6-r0 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 9.0.6 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.5.6-r0 |
| Medium | GHSA-492v-c6pp-mqqv | next | 15.5.16 |