ghcr.io/umami-software/umami:postgresql-v1.39.5 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/umami-software/umami

ghcr.io/umami-software/umami:postgresql-v1.39.5 resolved to 60fa8875aff8, scanned 14 Sept 2026: 78 findings, 1 critical; deployed by 1 chart, among them umami.

Radar Score

1,255141855

78 findings on digest 60fa8875aff8 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
postgresql-v1.39.5resolves to	60fa8875aff8	1 chart	8 days ago	141855	1,255

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

78 distinct on this digest

Findings for digest 60fa8875aff8 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-26519	musl@1.2.3-r0	1.2.3-r4
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-ggv3-7p47-pfv8	next@12.3.2	15.5.13
Low	GHSA-83g3-92jg-28cx	tar@6.1.11	7.5.8
Low	GHSA-w8wr-v893-vjvp	tar@6.1.11	7.5.18
Low	GHSA-2wm5-q62r-hmrv	colord@2.9.3	2.9.4
Low	GHSA-9g9p-9gw9-jx7f	next@12.3.2	15.5.10
Low	GHSA-8www-cffh-4q98	umami@1.39.5	2.3.1
Low	GHSA-2xp9-vwfh-vxw4	next@12.3.2	15.5.24
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	GHSA-g5qg-72qw-gw5v	next@12.3.2	14.2.31
Low	GHSA-gvwx-54wh-qm9j	tar@6.1.11	7.5.17
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.30.7	0.35.4
Low	ALPINE-CVE-2023-42366	busybox@1.35.0-r17	1.35.0-r18
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-vmf3-w455-68vh	tar@6.1.11	7.5.16
Low	GHSA-54xq-cgqr-rpm3	sharp@0.30.7	0.32.6
Low	GHSA-xv57-4mr9-wg8v	next@12.3.2	14.2.31
Low	GHSA-36jr-mh4h-2g58	d3-color@2.0.0	3.1.0
Low	GHSA-qpjv-v59x-3qc4	next@12.3.2	14.2.24
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.3	6.16.0
Low	GHSA-f88m-g3jw-g9cj	sharp@0.30.7	0.35.0
Low	GHSA-6rw7-vpxm-498p	qs@6.5.3	6.14.1
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@2.0.1	2.0.2
Low	GHSA-3g8h-86w9-wvmq	next@12.3.2	15.5.16
Low	GHSA-78xj-cgh5-2h22	ip@2.0.0	2.0.1
Low	GHSA-c59h-r6p8-q9wc	next@12.3.2	13.4.20-canary.13
Low	GHSA-vpq2-c234-7xj6	@tootallnate/once@2.0.0	2.0.1

Used by

1 chart

Chart	Version	Tag	Containers
umamiwaldo-visionVerified publisher	0.0.1	postgresql-v1.39.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.