ghcr.io/wundergraph/cosmo/studio:0.111.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/wundergraph/cosmo/studio
ghcr.io/wundergraph/cosmo/studio:0.111.0 resolved to 454f4384713a, scanned 14 Sept 2026: 201 findings, 0 critical; deployed by 1 chart, among them cosmo.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
201 distinct on this digest
Findings for digest 454f4384713a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-v245-v573-v5vm | linkify-it | 5.0.2 |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 4.0.4 |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 8.18.0 |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-4c8g-83qw-93j6 | fast-uri | 3.1.3 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.3.6-r0 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | GHSA-c83g-rgw3-j3cx | browserslist | 4.28.7 |
| Low | GHSA-h64f-5h5j-jqjh | next | 15.5.16 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-4c39-4ccg-62r3 | next | 15.5.21 |
| Low | GHSA-968p-4wvh-cqc8 | @babel/ | 7.26.10 |
| Low | GHSA-955p-x3mx-jcvp | next | 15.5.21 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 2.0.3 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | GHSA-ggv3-7p47-pfv8 | next | 15.5.13 |
| Low | GHSA-83g3-92jg-28cx | tar | 7.5.8 |
| Low | GHSA-38c4-r59v-3vqw | markdown-it | 14.1.1 |
| Low | GHSA-9qr9-h5gf-34mp | next | 15.2.6 |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-qj8w-gfj5-8c6v | serialize-javascript | 7.0.5 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | GHSA-9g9p-9gw9-jx7f | next | 15.5.10 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r11 |
| Low | GHSA-4633-3j49-mh5q | next | 15.5.21 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 15.5.24 |
| Low | GHSA-g5qg-72qw-gw5v | next | 15.4.5 |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | GO-2023-2382 | stdlib | 1.20.12 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GO-2024-2599 | stdlib | 1.21.8 |
| Low | GHSA-68g3-v927-f742 | next | 15.5.21 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | GO-2024-2609 | stdlib | 1.21.8 |