quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.0 container image
Quay.ioScanned 14 Sept 2026
Deployed by 6 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/devtron/devtron-utils
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.0 resolved to 95d6f0e05636, scanned 14 Sept 2026: 623 findings, 7 critical, 2 on KEV; deployed by 6 charts, among them devtron-operator, devtron-enterprise and devtron-enterprise.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
High findings
High: findings whose contribution to the Radar Score is 40–69. Show every band
Findings for digest 95d6f0e05636 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | DEBIAN-CVE-2025-15467 | openssl | 3.0.18-1~deb12u2 |
| High | DEBIAN-CVE-2024-6119 | openssl | 3.0.14-1~deb12u2 |
| High | DEBIAN-CVE-2024-2398 | curl | 7.88.1-10+deb12u6 |
| High | DEBIAN-CVE-2023-25652 | git | 1:2.39.5-0+deb12u1 |
| High | DEBIAN-CVE-2024-32002 | git | 1:2.39.5-0+deb12u1 |
| High | DEBIAN-CVE-2023-48795 | openssh | 1:9.2p1-2+deb12u2 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.17.0 |
| High | DEBIAN-CVE-2024-28182 | nghttp2 | 1.52.0-1+deb12u2 |
| High | DEBIAN-CVE-2024-2511 | openssl | 3.0.14-1~deb12u1 |
| High | DEBIAN-CVE-2023-24329 | python3.11 | 3.11.2-6+deb12u2 |
| High | DEBIAN-CVE-2019-6110 | openssh | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| devtron-operatordevtron | 0.23.3 | dup-chart-repo-v1.1.0 | 1 |
| devtron-enterprisedevtron | 48.0.0 | dup-chart-repo-v1.1.0 | 1 |
| devtron-enterprisedevtron-labs | 48.0.0 | dup-chart-repo-v1.1.0 | 1 |
| devtron-operatordevtron-labs | 0.23.3 | dup-chart-repo-v1.1.0 | 1 |
| devtron-enterpriseromholdings | 48.0.0 | dup-chart-repo-v1.1.0 | 1 |
| devtron-operatorromholdings | 0.23.3 | dup-chart-repo-v1.1.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.