registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.95.0 container image

GitLab Container Registry

Scanned 1 Oct 2026

Deployed by 1 of 17,966 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/xrow-public/helm-openclaw/openclaw

registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.95.0 resolved to cca2815e4ac2, scanned 1 Oct 2026: 124 findings, 2 critical, 2 on KEV; deployed by 1 chart, among them openclaw.

Radar Score

1,3022013109

124 findings on digest cca2815e4ac2 · scanned 1 Oct 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.95.0resolves to	cca2815e4ac2	1 chart	today	2013109	1,302

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

124 distinct on this digest

Findings for digest cca2815e4ac2 as scanned on 1 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 1 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	RHSA-2026:33486KEV	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-231.12.el10nv
Critical	RHSA-2026:72059KEV	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-231.20.el10nv
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.19	2.6.3
Medium	RHSA-2026:25534	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-212.10.el10nv
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.26.19	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.19	2.6.0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-m37j-52j7-pjw7	oras.land/oras-go/v2@v2.6.0	2.6.2
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.45.0	0.52.0
Medium	RHSA-2026:67277	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-231.19.el10nv
Low	GHSA-vxpw-j846-p89q	undici@6.26.0	6.27.0
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	RHSA-2026:73187	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-259.26.el10nv
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.6	5.0.9
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.16	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.16	7.5.18
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.6	5.0.8
Low	RHSA-2026:71586	libxml2@2.12.5-10.el10_2.3	0:2.12.5-10.el10_2.4
Low	GHSA-q675-qj96-32m9	golang.org/x/image@v0.20.0	0.41.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-r292-9mhp-454m	tar@7.5.16	7.5.21
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-vxq7-64xx-v4gw	urllib3@1.26.19	2.8.0
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-rfgv-xxqx-mfg5	undici@6.26.0	6.28.1
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.0	2.6.2
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@5.0.6	5.0.10
Low	GHSA-qhr7-859c-m2p7	brace-expansion@5.0.6	5.0.11
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.45.0	0.52.0
Low	RHSA-2026:37728	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-231.16.el10nv
Low	GHSA-2vr4-cq9g-pvrc	ip-address@10.2.0	10.5.1
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.49.0	0.55.0
Low	RHSA-2026:73429	gawk@5.3.0-6.el10	0:5.3.0-6.el10_2.1
Low	GHSA-8988-9cw3-xx77	urllib3@1.26.19	2.8.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.2.0	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.16	7.5.18
Low	RHSA-2026:23395	kernel@6.12.0-211.61.1.el10_2	0:6.12.0-212.9.el10nv
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.2.0	10.7.1
Low	GHSA-3wwx-pv8p-q78v	undici@6.26.0	6.28.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.45.0	0.52.0

Used by

1 chart

Chart	Version	Tag	Containers
openclawopenclawVerified publisher	1.95.0	1.95.0	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.