registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3 container image

GitLab Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/xrow-public/helm-openclaw/openclaw

registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3 resolved to ed44d81a65de, scanned 14 Sept 2026: 104 findings, 1 critical, 1 on KEV; deployed by 1 chart, among them openclaw.

Radar Score

1,029101192

104 findings on digest ed44d81a65de · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.91.3resolves to	ed44d81a65de	1 chart	yesterday	101192	1,029

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

92 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest ed44d81a65de as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vxpw-j846-p89q	undici@6.26.0	6.27.0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.6	5.0.9
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.16	7.5.19
Low	RHSA-2026:66336	vim@2:9.1.083-9.el10_2.12	2:9.1.083-9.el10_2.20
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.6	5.0.8
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.16	7.5.18
Low	RHSA-2026:23395	kernel@6.12.0-211.54.1.el10_2	0:6.12.0-212.9.el10nv
Low	RHSA-2026:27709	kernel@6.12.0-211.54.1.el10_2	0:6.12.0-212.11.el10nv
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-r292-9mhp-454m	tar@7.5.16	7.5.21
Low	GHSA-q675-qj96-32m9	golang.org/x/image@v0.20.0	0.41.0
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.0	2.6.2
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.16	7.5.18
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.52.0	0.55.0
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.16	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.19	2.5.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-65pc-fj4g-8rjx	idna@3.7	3.15
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@5.0.6	5.0.7
Low	GHSA-p88m-4jfj-68fv	undici@6.26.0	6.27.0
Low	GO-2026-4981	stdlib@go1.26.2	1.25.10
Low	GO-2026-4977	stdlib@go1.26.2	1.25.10
Low	GO-2026-4986	stdlib@go1.26.2	1.25.10
Low	GO-2026-4918	stdlib@go1.26.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.52.0	0.53.0
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.19	2.7.0
Low	GHSA-44p7-9xx4-hf2g	golang.org/x/image@v0.20.0	0.38.0
Low	GO-2026-5026	stdlib@go1.26.2	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.52.0	0.55.0
Low	GO-2026-5061	golang.org/x/image@v0.20.0	0.43.0
Low	GO-2026-5062	golang.org/x/image@v0.20.0	0.43.0
Low	GO-2026-5037	stdlib@go1.26.2	1.25.11
Low	GO-2026-4971	stdlib@go1.26.2	1.25.10
Low	GO-2026-5972	stdlib@go1.26.2	1.25.13
Low	GO-2026-6088	stdlib@go1.26.2	1.25.13
Low	GO-2026-6089	stdlib@go1.26.2	1.25.13
Low	GO-2026-6090	stdlib@go1.26.2	1.25.13
Low	GO-2026-5038	stdlib@go1.26.2	1.25.11
Low	GO-2025-3521	k8s.io/kubernetes@v1.36.1	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
openclawopenclawVerified publisher	1.91.3	1.91.3	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.