ghcr.io/wundergraph/cosmo/studio:0.111.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/wundergraph/cosmo/studio
ghcr.io/wundergraph/cosmo/studio:0.111.0 resolved to 454f4384713a, scanned 14 Sept 2026: 201 findings, 0 critical; deployed by 1 chart, among them cosmo.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
176 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 454f4384713a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-9qr9-h5gf-34mp | next | 15.2.6 |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-qj8w-gfj5-8c6v | serialize-javascript | 7.0.5 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | GHSA-9g9p-9gw9-jx7f | next | 15.5.10 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r11 |
| Low | GHSA-4633-3j49-mh5q | next | 15.5.21 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 15.5.24 |
| Low | GHSA-g5qg-72qw-gw5v | next | 15.4.5 |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | GO-2023-2382 | stdlib | 1.20.12 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GO-2024-2599 | stdlib | 1.21.8 |
| Low | GHSA-68g3-v927-f742 | next | 15.5.21 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | GO-2024-2609 | stdlib | 1.21.8 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 4.0.4 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 2.1.2 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GHSA-5c6j-r48x-rmvq | serialize-javascript | 7.0.3 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-8988-4f7v-96qf | @opentelemetry/ | 2.8.0 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | GHSA-gx5p-jg67-6x7h | next | 15.5.16 |
| Low | GHSA-qx2v-qp2m-jg93 | postcss | 8.5.10 |
| Low | GHSA-wfc6-r584-vfw7 | next | 15.5.16 |
| Low | GHSA-4fh9-h7wg-q85m | mdast-util-to-hast | 13.2.1 |