ghcr.io/voxpupuli/puppetserver:8.7.0-main container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/voxpupuli/puppetserver
ghcr.io/voxpupuli/puppetserver:8.7.0-main resolved to 63873f3f698e, scanned 14 Sept 2026: 491 findings, 4 critical, 2 on KEV; deployed by 1 chart, among them puppetserver.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
83 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 63873f3f698e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-5cqm-crxm-6qpv | cgi | 0.2.1 |
| Medium | UBUNTU-CVE-2024-5535 | openssl | no fix listed |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.2-0ubuntu1.25 |
| Medium | UBUNTU-CVE-2025-26465 | openssh | 1:8.9p1-3ubuntu0.11 |
| Medium | GHSA-v5h6-c2hv-hv3r | stringio | 3.0.1.1 |
| Medium | UBUNTU-CVE-2021-46848 | libtasn1-6 | 4.18.0-4ubuntu0.2 |
| Medium | GHSA-vc47-6rqg-c7f5 | cgi | 0.2.2 |
| Medium | GHSA-qg54-694p-wgpp | date | 3.1.2 |
| Medium | UBUNTU-CVE-2017-11164 | pcre3 | no fix listed |
| Medium | GHSA-4vf4-qmvg-mh7h | cgi | 0.2.1 |
| Medium | UBUNTU-CVE-2024-4741 | openssl | no fix listed |
| Medium | UBUNTU-CVE-2026-3497 | openssh | 1:8.9p1-3ubuntu0.14 |
| Medium | UBUNTU-CVE-2022-24975 | git | no fix listed |
| Medium | GHSA-hv5j-3h9f-99c2 | uri | 0.10.2 |
| Medium | UBUNTU-CVE-2026-19931 | curl | no fix listed |
| Medium | GHSA-fg7x-g82r-94qc | time | 0.1.1 |
| Medium | UBUNTU-CVE-2022-40735 | openssl | no fix listed |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2023-31486 | perl | no fix listed |
| Medium | UBUNTU-CVE-2018-5709 | krb5 | no fix listed |
| Medium | GHSA-fj7f-vq84-fh43 | bundler | 2.2.33 |
| Medium | UBUNTU-CVE-2016-20012 | openssh | no fix listed |
| Medium | UBUNTU-CVE-2023-25193 | harfbuzz | 2.7.4-1ubuntu3.2 |
| Medium | UBUNTU-CVE-2026-18924 | curl | no fix listed |
| Medium | UBUNTU-CVE-2022-4899 | libzstd | no fix listed |
| Medium | UBUNTU-CVE-2023-5678 | openssl | no fix listed |
| Medium | UBUNTU-CVE-2025-9230 | openssl | 3.0.2-0ubuntu1.20 |
| Medium | UBUNTU-CVE-2026-11856 | curl | 7.81.0-1ubuntu1.26 |
| Medium | UBUNTU-CVE-2023-6129 | openssl | no fix listed |
| Medium | UBUNTU-CVE-2026-8925 | curl | 7.81.0-1ubuntu1.25 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-q339-8rmv-2mhv | erb | 4.0.3.1 |
| Medium | UBUNTU-CVE-2026-41316 | ruby3.0 | no fix listed |
| Medium | GHSA-2rxp-v6pw-ch6m | rexml | 3.3.9 |
| Medium | GHSA-jr6h-r7vg-f9mc | ini4j | no fix listed |
| Medium | UBUNTU-CVE-2025-30749 | openjdk-17 | 17.0.16+8~us1-0ubuntu1~22.04.1 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Medium | UBUNTU-CVE-2026-63076 | openssl | 3.0.2-0ubuntu1.29 |
| Medium | UBUNTU-CVE-2025-59375 | expat | 2.4.7-1ubuntu0.7 |
| Medium | UBUNTU-CVE-2024-8176 | expat | 2.4.7-1ubuntu0.6 |
| Medium | GHSA-r55c-59qm-vjw6 | rexml | 3.3.3 |
| Medium | UBUNTU-CVE-2026-33846 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Medium | UBUNTU-CVE-2024-0727 | openssl | no fix listed |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 10.0.28 |
| Medium | GHSA-g857-hhfv-j68w | zlib | 3.0.1 |
| Medium | UBUNTU-CVE-2026-27820 | ruby3.0 | no fix listed |
| Medium | UBUNTU-CVE-2018-10126 | libjpeg-turbo | no fix listed |
| Medium | GHSA-5866-49gr-22v4 | rexml | 3.3.3 |
| Medium | UBUNTU-CVE-2025-58060 | cups | 2.4.1op1-1ubuntu4.12 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| puppetservercamptocamp3 | 1.0.1 | 8.7.0-main | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.