ghcr.io/wittdennis/calibre-web:1.1.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/wittdennis/calibre-web
ghcr.io/wittdennis/calibre-web:1.1.1 resolved to aa7d5d5dd6be, scanned 14 Sept 2026: 498 findings, 0 critical; deployed by 1 chart, among them calibre-web.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
498 distinct on this digest
Findings for digest aa7d5d5dd6be as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GO-2022-0515 | stdlib | 1.17.12 |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | DEBIAN-CVE-2023-45919 | mesa | no fix listed |
| Low | GHSA-52x6-gq3r-vpf4 | pypdf | 6.13.0 |
| Low | GHSA-j543-4vmf-qm7v | pypdf | 6.12.2 |
| Low | GHSA-m2v9-299j-rv96 | pypdf | 6.13.0 |
| Low | DEBIAN-CVE-2023-6135 | nss | no fix listed |
| Low | DEBIAN-CVE-2026-34979 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2023-38560 | ghostscript | no fix listed |
| Low | DEBIAN-CVE-2026-49271 | libheif | no fix listed |
| Low | DEBIAN-CVE-2023-26924 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2025-1377 | elfutils | no fix listed |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GO-2022-1095 | stdlib | 1.18.8 |
| Low | DEBIAN-CVE-2023-3164 | tiff | no fix listed |
| Low | GO-2023-1621 | stdlib | 1.19.7 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GHSA-g9xf-7f8q-9mcj | pypdf | 6.13.1 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2026-76957 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-56109 | alsa-lib | no fix listed |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | DEBIAN-CVE-2026-72522 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56403 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56404 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56405 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56408 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56406 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56407 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56410 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56411 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-86142 | libxml2 | no fix listed |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | DEBIAN-CVE-2026-47254 | libheif | no fix listed |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| calibre-webcharts-derwitt-devVerified publisher | 1.1.2 | 1.1.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.