registry.gitlab.com/xrow-public/ci-tools/tools:main container image
GitLab Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/xrow-public/ci-tools/tools
registry.gitlab.com/xrow-public/ci-tools/tools:main resolved to 9b9d1ed86b6a, scanned 14 Sept 2026: 206 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them rancher-auto-register.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 9b9d1ed86b6a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | GO-2026-5061 | golang.org/ | 0.43.0 |
| Low | GO-2026-5062 | golang.org/ | 0.43.0 |
| Low | GHSA-rg2x-37c3-w2rh | github.com/ | no fix listed |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | RHSA-2026:59380 | attr | 0:2.6.0-1.el10_2 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | GO-2025-3521 | k8s.io/ | no fix listed |
| Low | RHSA-2026:59379 | pam | 0:1.6.1-9.el10_2.1 |
| Low | RHSA-2026:49668 | p11-kit | 0:0.26.4-1.el10_2 |
| Low | GO-2026-5942 | stdlib | 1.26.6 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | GO-2026-4440 | golang.org/ | 0.45.0 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GHSA-vh4v-2xq2-g5cg | oras.land/ | 2.6.1 |
| Low | GO-2026-4441 | golang.org/ | 0.45.0 |
| Low | GHSA-7jxh-36q5-gcqv | github.com/ | 2.3.5 |
| Low | GHSA-7jxh-36q5-gcqv | github.com/ | 1.7.35 |
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | PYSEC-2026-2275 | requests | 2.33.0 |
| Low | GHSA-w8rr-5gcm-pp58 | go.opentelemetry.io/ | 1.43.0 |
| Low | GHSA-w8rr-5gcm-pp58 | go.opentelemetry.io/ | 0.19.0 |
| Low | GHSA-w8rr-5gcm-pp58 | go.opentelemetry.io/ | 1.43.0 |
| Low | GHSA-w5pp-99ch-qj29 | github.com/ | 5.19.1 |
| Low | GHSA-3xc5-wrhm-f963 | github.com/ | 5.18.0 |
| Low | GO-2026-6222 | golang.org/ | 0.45.0 |
| Low | GHSA-w9m9-85wc-3x92 | postcss-selector-parser | 7.1.3 |
| Low | GHSA-gcjh-h69q-9w9g | github.com/ | 0.29.0 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | GO-2026-5031 | golang.org/ | 0.41.0 |
| Low | GHSA-vp62-88p7-qqf5 | github.com/ | no fix listed |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | GO-2026-5064 | github.com/ | no fix listed |
| Low | GO-2022-0646 | github.com/ | no fix listed |
| Low | GHSA-hr2v-4r36-88hr | helm.sh/ | 3.20.2 |
| Low | GO-2026-5066 | golang.org/ | 0.43.0 |
| Low | GO-2026-4961 | golang.org/ | 0.42.0 |
| Low | GO-2026-5158 | go.opentelemetry.io/ | 1.42.0 |
| Low | GO-2025-3887 | helm | no fix listed |
| Low | GO-2025-3888 | helm | no fix listed |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| rancher-auto-registerrancher-auto-registerVerified publisher | 0.1.0 | main | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.