StackRadar

public.ecr.aws/p1t3u8a3/spot:v1.28.0 container image

Amazon ECR Public

Scanned 20 Oct 2026

Deployed by 1 of 18,196 indexed charts (latest versions) at this tag.all tags of public.ecr.aws/p1t3u8a3/spot

public.ecr.aws/p1t3u8a3/spot:v1.28.0 resolved to 0ba5cb666370, scanned 20 Oct 2026: 36 findings, 0 critical; deployed by 1 chart, among them openreplay.

Radar Score

36800432

36 findings on digest 0ba5cb666370 · scanned 20 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.28.0resolves to0ba5cb6663701 charttoday00432368

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

32 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 0ba5cb666370 as scanned on 20 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-77214expat@2.8.5-r02.9.0-r0
LowGO-2026-6603golang.org/x/net@v0.58.00.60.0
LowGO-2026-6603stdlib@go1.26.81.26.9
LowGO-2026-6611golang.org/x/net@v0.58.00.60.0
LowGO-2026-6611stdlib@go1.26.81.26.9
LowALPINE-CVE-2026-85091zlib@1.3.2-r01.3.2-r1
LowGO-2026-6617stdlib@go1.26.81.26.9
LowGO-2026-6617golang.org/x/net@v0.58.00.60.0
LowGO-2026-6608stdlib@go1.26.81.26.9
LowGO-2026-6607stdlib@go1.26.81.26.9
LowGO-2026-6609stdlib@go1.26.81.26.9
LowGO-2026-6613stdlib@go1.26.81.26.9
LowGO-2026-6605stdlib@go1.26.81.26.9
LowGO-2026-6610golang.org/x/net@v0.58.00.60.0
LowGO-2026-6610stdlib@go1.26.81.26.9
LowALPINE-CVE-2026-103111pcre2@10.48-r010.49-r0
LowALPINE-CVE-2026-88806libx11@1.8.13-r01.8.14-r0
LowALPINE-CVE-2026-102633expat@2.8.5-r02.9.0-r0
LowGHSA-685w-q87j-wqw3github.com/docker/distribution@v2.8.3+incompatibleno fix listed
LowALPINE-CVE-2026-58055nghttp2@1.69.0-r01.70.0-r0
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.55.8no fix listed
LowALPINE-CVE-2026-94283libx11@1.8.13-r01.8.14-r0
LowGO-2026-6599stdlib@go1.26.81.26.9
LowGO-2026-6600stdlib@go1.26.81.26.9
LowALPINE-CVE-2026-94284libx11@1.8.13-r01.8.14-r0
LowALPINE-CVE-2026-94285libx11@1.8.13-r01.8.14-r0
LowRUSTSEC-2024-0436paste@1.0.15no fix listed
LowRUSTSEC-2026-0105core2@0.4.0no fix listed
LowRUSTSEC-2026-0190anyhow@1.0.981.0.103
LowRUSTSEC-2026-0204crossbeam-epoch@0.9.180.9.20
LowGO-2022-0635github.com/aws/aws-sdk-go@v1.55.8no fix listed
LowGHSA-cq8v-f236-94qcrand@0.9.10.9.3

Used by

1 chart
ChartVersionTagContainers
openreplayhelmforgeVerified publisher1.1.1, 1.0.0v1.28.02

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 20 Oct 2026 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.