ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/voxpupuli/container-puppetdb
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0 resolved to a56dfe91f5b1, scanned 14 Sept 2026: 556 findings, 9 critical, 2 on KEV; deployed by 1 chart, among them puppetserver.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest a56dfe91f5b1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-48959 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-59843 | libssh | 0.9.6-2ubuntu0.22.04.8 |
| Low | UBUNTU-CVE-2026-5928 | glibc | 2.35-0ubuntu3.14 |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.35-0ubuntu3.15 |
| Low | UBUNTU-CVE-2022-27943 | gcc-12 | no fix listed |
| Low | UBUNTU-CVE-2026-47058 | openjdk-17 | no fix listed |
| Low | UBUNTU-CVE-2026-47058 | openjdk-8 | 8u502-ga~us1-0ubuntu1~22.04 |
| Low | UBUNTU-CVE-2025-64720 | libpng1.6 | 1.6.37-3ubuntu0.1 |
| Low | UBUNTU-CVE-2026-8458 | curl | 7.81.0-1ubuntu1.25 |
| Low | UBUNTU-CVE-2026-76641 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-6253 | curl | 7.81.0-1ubuntu1.24 |
| Low | UBUNTU-CVE-2025-13601 | glib2.0 | 2.72.4-0ubuntu2.7 |
| Low | UBUNTU-CVE-2025-5222 | icu | no fix listed |
| Low | UBUNTU-CVE-2025-14087 | glib2.0 | 2.72.4-0ubuntu2.7 |
| Low | UBUNTU-CVE-2026-13321 | bind9 | 1:9.18.39-0ubuntu0.22.04.5 |
| Low | UBUNTU-CVE-2022-49043 | libxml2 | 2.9.13+dfsg-1ubuntu0.5 |
| Low | GHSA-j26w-f9rq-mr2q | jetty-servlets | 9.4.54 |
| Low | UBUNTU-CVE-2026-58013 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-34990 | cups | 2.4.1op1-1ubuntu4.20 |
| Low | UBUNTU-CVE-2026-58015 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-58010 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-58012 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-9547 | curl | 7.81.0-1ubuntu1.25 |
| Low | UBUNTU-CVE-2026-58011 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-66293 | libpng1.6 | 1.6.37-3ubuntu0.3 |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Low | UBUNTU-CVE-2026-40355 | krb5 | 1.19.2-2ubuntu0.8 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.34.0-3ubuntu1.8 |
| Low | UBUNTU-CVE-2026-6276 | curl | 7.81.0-1ubuntu1.24 |
| Low | UBUNTU-CVE-2026-40356 | krb5 | 1.19.2-2ubuntu0.8 |
| Low | GHSA-r995-q44h-hr64 | webrick | 1.8.2 |
| Low | UBUNTU-CVE-2024-26458 | krb5 | 1.19.2-2ubuntu0.6 |
| Low | UBUNTU-CVE-2025-30761 | openjdk-8 | 8u462-ga~us1-0ubuntu2~22.04.2 |
| Low | GHSA-4xqq-m2hx-25v8 | rexml | 3.3.2 |
| Low | UBUNTU-CVE-2016-2781 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-42767 | openssl | 3.0.2-0ubuntu1.25 |
| Low | UBUNTU-CVE-2026-5545 | curl | 7.81.0-1ubuntu1.24 |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-3784 | curl | 7.81.0-1ubuntu1.23 |
| Low | UBUNTU-CVE-2025-68471 | avahi | 0.8-5ubuntu5.4 |
| Low | UBUNTU-CVE-2026-34978 | cups | 2.4.1op1-1ubuntu4.20 |
| Low | UBUNTU-CVE-2025-21502 | openjdk-17 | 17.0.14+7-1~22.04.1 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Low | UBUNTU-CVE-2025-30698 | openjdk-17 | 17.0.15+6~us1-0ubuntu1~22.04 |
| Low | UBUNTU-CVE-2025-30698 | openjdk-8 | 8u452-ga~us1-0ubuntu1~22.04 |
| Low | UBUNTU-CVE-2026-47063 | openjdk-17 | 17.0.20+8-1~22.04 |
| Low | UBUNTU-CVE-2026-47063 | openjdk-8 | 8u502-ga~us1-0ubuntu1~22.04 |
| Low | UBUNTU-CVE-2024-28834 | gnutls28 | 3.7.3-4ubuntu1.5 |
| Low | UBUNTU-CVE-2020-25697 | libx11 | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| puppetserverpuppetserver | 9.5.2 | 7.18.0-v1.5.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.