registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5 container image

GitLab Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/xrow-public/helm-iframely/iframely

registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5 resolved to fcf07d5ff7e2, scanned 14 Sept 2026: 199 findings, 5 critical, 2 on KEV; deployed by 1 chart, among them iframely.

Radar Score

3,1545652136

199 findings on digest fcf07d5ff7e2 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.3.5resolves to	fcf07d5ff7e2	1 chart	yesterday	5652136	3,154

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

199 distinct on this digest

Findings for digest fcf07d5ff7e2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	RHSA-2026:50147	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	RHSA-2026:61247	libxml2@2.9.13-14.el9_7	0:2.9.13-14.el9_8.4
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-m6fv-jmcg-4jfg	send@0.18.0	0.19.0
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.5	2.5.0
Low	RHSA-2026:33226	glibc@2.34-231.el9_7.10	0:2.34-272.el9_8
Low	RHSA-2026:12441	libcap@2.48-10.el9	0:2.48-10.el9_7.1
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.1	2.3.2
Low	GHSA-65pc-fj4g-8rjx	idna@2.10	3.15
Low	GHSA-mh29-5h37-fv8m	js-yaml@4.1.0	4.1.1
Low	RHSA-2026:54484	python-idna@2.10-7.el9_4.1	0:2.10-8.el9_8
Low	GHSA-9wx4-h78v-vm56	requests@2.25.1	2.32.0
Low	RHSA-2026:64812	expat@2.5.0-5.el9_7.1	0:2.5.0-6.el9_8.3
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.0	4.2.0
Low	RHSA-2026:13677	systemd@252-55.el9_7.8	0:252-55.el9_7.9
Low	RHSA-2026:42736	acl@2.3.1-4.el9	0:2.4.0-1.el9_8
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	RHSA-2026:47040	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.31.1.el9_8
Low	GHSA-q8mj-m7cp-5q26	qs@6.13.0	6.15.2
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@6.0.2	7.0.3
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	RHSA-2026:61581	tar@2:1.34-9.el9_7	2:1.34-13.el9_8
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.5	2.7.0
Low	RHSA-2026:51035	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.36.1.el9_8
Low	RHSA-2026:18693	python3.9@3.9.25-3.el9_7.2	0:3.9.25-5.el9_8
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@4.1.0	4.3.1
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.5	1.26.18
Low	RHSA-2026:54662	nghttp2@1.43.0-6.el9	0:1.43.0-6.el9_8.2
Low	GHSA-4mjr-xmp4-gh2g	qs@6.13.0	6.16.0
Low	RHSA-2026:60226	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
Low	RHSA-2026:60224	pam@1.5.1-26.el9_6	0:1.5.1-27.el9_8.1
Low	RHSA-2026:49667	p11-kit@0.25.3-3.el9_5	0:0.26.4-1.el9_8
Low	PYSEC-2026-2275	requests@2.25.1	2.33.0
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	GHSA-w7fw-mjwx-w883	qs@6.13.0	6.14.2
Low	RHSA-2026:28911	coreutils@8.32-39.el9	0:8.32-41.el9_8
Low	GHSA-6rw7-vpxm-498p	qs@6.13.0	6.14.1
Low	RHSA-2026:49870	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.34.1.el9_8
Low	GHSA-v422-hmwv-36x6	body-parser@1.20.3	1.20.6
Low	RHSA-2026:61355	dbus-broker@28-7.el9	0:28-9.el9_8
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@2.0.1	2.0.2
Low	GHSA-75v8-2h7p-7m2m	formidable@2.1.2	2.1.3
Low	RHSA-2026:66403	coreutils@8.32-39.el9	0:8.32-41.el9_8.1
Low	RHSA-2026:22717	vim@2:8.2.2637-23.el9_7.1	2:8.2.2637-26.el9_8.5
Low	GHSA-pxg6-pf52-xh8x	cookie@0.5.0	0.7.0
Low	RHSA-2026:39317	libxml2@2.9.13-14.el9_7	0:2.9.13-14.el9_8.2

Used by

1 chart

Chart	Version	Tag	Containers
iframelyiframelyVerified publisher	2.3.5	2.3.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.