registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5 container image

GitLab Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/xrow-public/helm-iframely/iframely

registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5 resolved to fcf07d5ff7e2, scanned 14 Sept 2026: 199 findings, 5 critical, 2 on KEV; deployed by 1 chart, among them iframely.

Radar Score

3,1545652136

199 findings on digest fcf07d5ff7e2 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.3.5resolves to	fcf07d5ff7e2	1 chart	yesterday	5652136	3,154

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

52 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest fcf07d5ff7e2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-vg7j-7cwx-8wgw	mongoose@8.8.0	8.9.5
Medium	GHSA-m7xq-9374-9rvx	mongoose@8.8.0	8.8.3
Medium	RHSA-2026:25239	openssl@1:3.5.1-7.el9_7	1:3.5.5-4.el9_8
Medium	GHSA-p6mc-m468-83gw	lodash.pick@4.4.0	no fix listed
Medium	RHSA-2026:35891	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:24.18.0-1.module+el9.8.0+24456+b244c3b4
Medium	RHSA-2026:35891	nodejs-nodemon@3.0.1-1.module+el9.7.0+23895+0637d423	0:3.0.3-3.module+el9.8.0+24355+35d95b59
Medium	RHSA-2026:35892	nodejs-nodemon@3.0.1-1.module+el9.7.0+23895+0637d423	0:3.0.1-1.module+el9.8.0+24156+bb41d456
Medium	RHSA-2026:35892	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:22.23.1-1.module+el9.8.0+24457+996af7aa
Medium	RHSA-2026:2781	nodejs-nodemon@3.0.1-1.module+el9.7.0+23895+0637d423	0:3.0.3-3.module+el9.7.0+23894+c8377628
Medium	RHSA-2026:2781	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:24.13.0-1.module+el9.7.0+23894+c8377628
Medium	RHSA-2026:2782	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:22.22.0-1.module+el9.7.0+23896+b5802de9
Medium	RHSA-2026:2782	nodejs-nodemon@3.0.1-1.module+el9.7.0+23895+0637d423	0:3.0.1-1.module+el9.7.0+23896+b5802de9
Medium	GHSA-fjxv-7rqg-78g4	form-data@4.0.0	4.0.4
Medium	RHSA-2026:36645	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.23.1.el9_8
Medium	GHSA-cx63-2mw6-8hw5	setuptools@53.0.0	70.0.0
Medium	GHSA-5j98-mcp5-4vw2	glob@10.4.2	10.5.0
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.5	2.6.3
Medium	GHSA-r9hx-vwmv-q579	setuptools@53.0.0	65.5.1
Medium	PYSEC-2025-49	setuptools@53.0.0	78.1.1
Medium	GHSA-rp65-9cf3-cjxr	nth-check@1.0.2	2.0.1
Medium	RHSA-2026:19368	rsync@3.2.5-3.el9_7.2	0:3.2.5-7.el9_8
Medium	RHSA-2026:20612	gnutls@3.8.3-10.el9_7	0:3.8.10-4.el9_8
Medium	GHSA-35q2-47q7-3pc3	redis@2.8.0	3.1.1
Medium	GHSA-j8r2-6x86-q33q	requests@2.25.1	2.31.0
Medium	PYSEC-2023-192	urllib3@1.26.5	2.0.6
Medium	RHSA-2026:21556	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.12.1.el9_8
Medium	RHSA-2025:1613	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:22.13.1-1.module+el9.5.0+22763+17233acb
Medium	GHSA-grv7-fg5c-xmjg	braces@3.0.2	3.0.3
Medium	PYSEC-2024-60	idna@2.10	3.7
Medium	RHSA-2026:63129	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.44.1.el9_8
Medium	RHSA-2026:8510	libarchive@3.5.3-7.el9_7	0:3.5.3-9.el9_7
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.26.5	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.5	2.6.0
Medium	RHSA-2026:36957	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.24.1.el9_8
Medium	RHSA-2026:8259	vim@2:8.2.2637-23.el9_7.1	2:8.2.2637-23.el9_7.2
Medium	RHSA-2026:25217	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.15.1.el9_8
Medium	RHSA-2026:26410	rsync@3.2.5-3.el9_7.2	0:3.2.5-7.el9_8.2
Medium	RHSA-2026:55601	nodejs-nodemon@3.0.1-1.module+el9.7.0+23895+0637d423	0:3.1.14-2.module+el9.8.0+24637+e0b636e5
Medium	RHSA-2026:55601	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:22.23.1-3.module+el9.8.0+24637+e0b636e5
Medium	RHSA-2026:55603	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:24.18.0-6.module+el9.8.0+24638+75f46aee
Medium	RHSA-2026:55603	nodejs-nodemon@3.0.1-1.module+el9.7.0+23895+0637d423	0:3.1.14-3.module+el9.8.0+24638+75f46aee
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.10	0.1.13
Medium	RHSA-2026:28254	libxml2@2.9.13-14.el9_7	0:2.9.13-14.el9_8.1
Medium	RHSA-2026:38491	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.25.1.el9_8
Medium	RHSA-2026:66180	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.46.1.el9_8
Medium	RHSA-2026:57252	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.41.1.el9_8
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	RHSA-2026:64808	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.45.1.el9_8
Medium	RHSA-2025:8467	nodejs@1:20.20.0-1.module+el9.7.0+23895+0637d423	1:22.16.0-1.module+el9.6.0+23151+b1496e9d
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.1.2	3.1.3

Used by

1 chart

Chart	Version	Tag	Containers
iframelyiframelyVerified publisher	2.3.5	2.3.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.