ghcr.io/wundergraph/cosmo/controlplane:0.133.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/wundergraph/cosmo/controlplane

ghcr.io/wundergraph/cosmo/controlplane:0.133.1 resolved to 49800ff775f3, scanned 14 Sept 2026: 288 findings, 0 critical; deployed by 1 chart, among them cosmo.

Radar Score

2,9950338247

288 findings on digest 49800ff775f3 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
0.133.1resolves to	49800ff775f3	1 chart	yesterday	0338247	2,995

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

247 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 49800ff775f3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2025-3849	stdlib@go1.22.3	1.23.12
Low	GO-2026-4946	stdlib@go1.22.3	1.25.9
Low	GHSA-v3r7-h72x-cjcm	undici@5.28.4	6.28.0
Low	GO-2026-4603	stdlib@go1.22.3	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.23.0	0.55.0
Low	GHSA-8m3c-c648-2xjj	nodemailer@6.9.11	9.1.1
Low	GO-2026-6354	golang.org/x/crypto@v0.23.0	0.56.0
Low	GO-2026-4982	stdlib@go1.22.3	1.25.10
Low	GO-2026-6091	stdlib@go1.22.3	1.25.13
Low	GHSA-8xcm-r25x-g524	undici@5.28.4	6.28.0
Low	GO-2026-6180	golang.org/x/mod@v0.17.0	0.40.0
Low	GO-2025-3750	stdlib@go1.22.3	1.23.10
Low	GO-2026-4864	stdlib@go1.22.3	1.25.9
Low	GO-2025-3447	stdlib@go1.22.3	1.22.12
Low	GO-2026-4865	stdlib@go1.22.3	1.25.9
Low	GO-2026-4869	stdlib@go1.22.3	1.25.9
Low	GO-2026-4340	stdlib@go1.22.3	1.24.12
Low	GO-2025-4175	stdlib@go1.22.3	1.24.11
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@2.0.1	2.0.2
Low	ALPINE-CVE-2025-68160	openssl@3.3.3-r0	3.3.6-r0
Low	GO-2026-4403	stdlib@go1.22.3	1.23.9
Low	GO-2026-5025	golang.org/x/net@v0.25.0	0.55.0
Low	GO-2026-4970	stdlib@go1.22.3	1.25.12
Low	GHSA-m8rv-5g2x-5cg5	undici@5.28.4	6.28.0
Low	GO-2026-5027	golang.org/x/net@v0.25.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.25.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.25.0	0.55.0
Low	GO-2026-5777	github.com/go-chi/chi/v5@v5.0.12	5.3.0
Low	GHSA-c7w3-x93f-qmm8	nodemailer@6.9.11	8.0.4
Low	GO-2026-4602	stdlib@go1.22.3	1.25.8
Low	GHSA-g8m3-5g58-fq7m	undici@5.28.4	6.27.0
Low	GHSA-35p6-xmwp-9g52	undici@5.28.4	6.27.0
Low	GHSA-xhjh-pmcv-23jw	axios@1.8.4	1.15.1
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.0.12	5.3.0
Low	GHSA-cxrh-j4jr-qwg3	undici@5.28.4	5.29.0
Low	GHSA-r8jr-wg88-fq5c	@keycloak/keycloak-admin-client@25.0.2	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.3.3-r0	3.3.6-r0
Low	GO-2026-5024	golang.org/x/sys@v0.11.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.17.0	0.40.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.17.8	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.23.0	no fix listed
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r12	1.37.0-r14
Low	GHSA-pxg6-pf52-xh8x	cookie@0.5.0	0.7.0
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v26.1.3+incompatible	28.0.0
Low	GHSA-6475-r3vj-m8vf	@smithy/config-resolver@2.1.4	4.4.0
Low	GHSA-4x5r-pxfx-6jf8	@babel/core@7.24.5	7.29.6
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r12	1.37.0-r14

Used by

1 chart

Chart	Version	Tag	Containers
cosmocosmo-platformOfficialVerified publisher	0.20.0	0.133.1	5

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.