registry.k8s.io/autoscaling/vpa-updater:1.6.0 container image

Kubernetes registry

Scanned 19 Oct 2026

Deployed by 1 of 18,196 indexed charts (latest versions) at this tag.all tags of registry.k8s.io/autoscaling/vpa-updater

registry.k8s.io/autoscaling/vpa-updater:1.6.0 resolved to b39d1dfa19cb, scanned 19 Oct 2026: 59 findings, 0 critical; deployed by 1 chart, among them ocean-vpa.

Radar Score

69900851

59 findings on digest b39d1dfa19cb · scanned 19 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.6.0resolves to	b39d1dfa19cb	1 chart	13 days ago	00851	699

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

8 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest b39d1dfa19cb as scanned on 19 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GO-2026-5026	golang.org/x/net@v0.50.0	0.55.0
Medium	GO-2026-5026	stdlib@go1.25.7	1.25.13
Medium	GO-2026-6612	stdlib@go1.25.7	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.50.0	0.60.0
Medium	GO-2026-6604	stdlib@go1.25.7	1.26.9
Medium	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.40.0	1.41.0
Medium	GO-2026-4601	stdlib@go1.25.7	1.25.8
Medium	GO-2026-4981	stdlib@go1.25.7	1.25.10

Used by

1 chart

Chart	Version	Tag	Containers
ocean-vpaspot	1.0.7	1.6.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.