ghcr.io/umami-software/umami:3.3.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/umami-software/umami

ghcr.io/umami-software/umami:3.3.1 resolved to fa32d116cf20, scanned 14 Sept 2026: 29 findings, 0 critical; deployed by 1 chart, among them umami.

Radar Score

40100920

29 findings on digest fa32d116cf20 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.3.1resolves to	fa32d116cf20	1 chart	8 days ago	00920	401

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

29 distinct on this digest

Findings for digest fa32d116cf20 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-p293-qw3h-jr36	next@16.3.0	16.3.3
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-ggr8-5vv4-36mx	deepmerge-ts@7.1.5	8.0.0
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-5jgf-p345-68v8	fast-uri@3.1.5	3.1.6
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.5	3.1.6
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.5	3.1.6
Low	GHSA-fph4-wmhf-6fwf	fast-uri@3.1.5	3.1.6
Low	GHSA-2xp9-vwfh-vxw4	next@16.3.0	16.3.3
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.35.3	0.35.4
Low	GHSA-3f6p-5ww8-9rcr	mysql2@3.15.3	3.22.0
Low	GHSA-rgwj-5xj2-c3m3	mysql2@3.15.3	3.23.1

Used by

1 chart

Chart	Version	Tag	Containers
umamihelmforgeVerified publisher	2.3.3	3.3.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.