ghcr.io/wittdennis/calibre-web:1.1.2 container image

GitHub Container Registry

Scanned 27 Sept 2026

Deployed by 1 of 17,911 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/wittdennis/calibre-web

ghcr.io/wittdennis/calibre-web:1.1.2 resolved to 953aa0935251, scanned 27 Sept 2026: 508 findings, 0 critical; deployed by 1 chart, among them calibre-web.

Radar Score

5,1900177430

508 findings on digest 953aa0935251 · scanned 27 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.1.2resolves to	953aa0935251	1 chart	today	0177430	5,190

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

508 distinct on this digest

Findings for digest 953aa0935251 as scanned on 27 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 27 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-88373	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-34980	cups@2.4.2-3+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-45382	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	GO-2022-0477	stdlib@go1.17.8	1.17.11
Low	DEBIAN-CVE-2026-45383	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2025-61915	cups@2.4.2-3+deb12u9	no fix listed
Low	GO-2022-0533	stdlib@go1.17.8	1.17.11
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-86420	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u13	no fix listed
Low	DEBIAN-CVE-2025-8177	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-48029	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2021-45346	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.5.2-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	GO-2022-0523	stdlib@go1.17.8	1.17.12
Low	GO-2024-2887	stdlib@go1.17.8	1.21.11
Low	DEBIAN-CVE-2024-38950	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	GO-2022-0522	stdlib@go1.17.8	1.17.12
Low	GO-2022-0527	stdlib@go1.17.8	1.17.12
Low	GO-2022-0524	stdlib@go1.17.8	1.17.12
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2025-68431	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u5	no fix listed
Low	DEBIAN-CVE-2026-49295	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	DEBIAN-CVE-2026-49346	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	GO-2023-1704	stdlib@go1.17.8	1.19.8
Low	GHSA-jm82-fx9c-mx94	pypdf@6.10.2	6.13.3
Low	DEBIAN-CVE-2024-7531	nss@2:3.87.1-1+deb12u4	no fix listed
Low	DEBIAN-CVE-2025-8176	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2016-2781	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-57432	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-34978	cups@2.4.2-3+deb12u9	no fix listed
Low	DEBIAN-CVE-2026-63074	openssl@3.0.20-1~deb12u2	3.0.22-1~deb12u1
Low	DEBIAN-CVE-2026-52491	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2025-7709	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-68471	avahi@0.8-10+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-89157	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2024-38949	libde265@1.0.11-1+deb12u2	1.0.11-1+deb12u3
Low	GO-2022-0526	stdlib@go1.17.8	1.17.12
Low	DEBIAN-CVE-2026-11824	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	GO-2023-1568	stdlib@go1.17.8	1.19.6
Low	DEBIAN-CVE-2026-32814	libheif@1.15.1-1+deb12u1	no fix listed
Low	GO-2022-1037	stdlib@go1.17.8	1.18.7
Low	DEBIAN-CVE-2026-32739	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-41069	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	DEBIAN-CVE-2025-68468	avahi@0.8-10+deb12u1	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
calibre-webcharts-derwitt-devVerified publisher	1.1.3	1.1.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.