ghcr.io/wundergraph/cosmo/cdn:0.14.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/wundergraph/cosmo/cdn
ghcr.io/wundergraph/cosmo/cdn:0.14.1 resolved to d86fcf169f15, scanned 14 Sept 2026: 237 findings, 0 critical; deployed by 1 chart, among them cosmo.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
237 distinct on this digest
Findings for digest d86fcf169f15 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | GHSA-j6c9-x7qj-28xf | hono | 4.12.25 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-42014 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-4105 | systemd | 252.39-1~deb12u2 |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2023-4641 | shadow | 1:4.13+dfsg1-1+deb12u1 |
| Low | GHSA-jfc7-64v2-mr8c | @sigstore/ | 3.2.1 |
| Low | GHSA-rv63-4mwf-qqc2 | hono | 4.12.25 |
| Low | GHSA-2gcr-mfcq-wcc3 | hono | 4.12.21 |
| Low | DEBIAN-CVE-2026-40225 | systemd | 252.39-1~deb12u2 |
| Low | GHSA-xrhx-7g5j-rcj5 | hono | 4.12.21 |
| Low | DEBIAN-CVE-2026-27171 | zlib | no fix listed |
| Low | DEBIAN-CVE-2025-1390 | libcap2 | 1:2.66-4+deb12u1 |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | GHSA-r354-f388-2fhh | hono | 4.11.7 |
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | GHSA-5pq2-9x2x-5p6w | hono | 4.12.4 |
| Low | DEBIAN-CVE-2025-8058 | glibc | 2.36-9+deb12u13 |
| Low | DEBIAN-CVE-2026-56392 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-54370 | acl | no fix listed |
| Low | DEBIAN-CVE-2005-2541 | tar | no fix listed |
| Low | GHSA-9r54-q6cx-xmh5 | hono | 4.11.7 |
| Low | GHSA-r5rp-j6wh-rvv4 | hono | 4.12.12 |
| Low | DEBIAN-CVE-2026-15534 | perl | no fix listed |
| Low | GHSA-v8w9-8mx6-g223 | hono | 4.12.7 |
| Low | DEBIAN-CVE-2026-56391 | coreutils | no fix listed |
| Low | GHSA-p77w-8qqv-26rm | hono | 4.12.18 |
| Low | DEBIAN-CVE-2024-10041 | pam | no fix listed |
| Low | GHSA-w9m9-85wc-3x92 | postcss-selector-parser | 6.1.3 |
| Low | DEBIAN-CVE-2026-18938 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-13595 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-5278 | coreutils | no fix listed |
| Low | GHSA-458j-xx4x-4375 | hono | 4.12.14 |
| Low | GHSA-f577-qrjj-4474 | hono | 4.12.21 |
| Low | GHSA-q7jf-gf43-6x6p | hono | 4.10.3 |
| Low | DEBIAN-CVE-2025-15649 | perl | no fix listed |
| Low | DEBIAN-CVE-2010-4756 | glibc | no fix listed |
| Low | GHSA-frvp-7c67-39w9 | @hono/ | 1.19.15 |
| Low | DEBIAN-CVE-2025-6141 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2026-29111 | systemd | 252.39-1~deb12u2 |
| Low | DEBIAN-CVE-2025-30258 | gnupg2 | no fix listed |
| Low | GHSA-xgm2-5f3f-mvvc | hono | 4.12.27 |
| Low | DEBIAN-CVE-2026-15059 | systemd | no fix listed |
| Low | DEBIAN-CVE-2024-56433 | shadow | no fix listed |
| Low | GHSA-wgpf-jwqj-8h8p | hono | 4.12.25 |
| Low | DEBIAN-CVE-2026-41991 | gzip | no fix listed |
| Low | DEBIAN-CVE-2026-5419 | gnutls28 | 3.7.9-2+deb12u7 |