registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1 container image
GitLab Container RegistryScanned 14 Sept 2026
Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/gitlab-org/gitlab-runner
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1 resolved to af0325804248, scanned 14 Sept 2026: 88 findings, 0 critical; deployed by 3 charts, among them gitlab-runner, gitlab-runner and gitlab-runner.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest af0325804248 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | GO-2026-4887 | github.com/ | no fix listed |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| gitlab-runnergitlabVerified publisher | 0.92.1 | alpine-v19.3.1 | 1 |
| gitlab-runnergitlab-jh | 0.92.1 | alpine-v19.3.1 | 1 |
| gitlab-runnerwenerme | 0.92.1 | alpine-v19.3.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.