quay.io/prometheus/alertmanager
container imageDeployed by 2 of 300 indexed charts (latest versions).Counts say nothing about images outside the indexed set.
Radar Score
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 5
- On CISA KEV
- 0
- Exploited (EPSS ≥ 0.1)
- 0
5 findings on digest 690c7b525f43 · scanned 2 Sept 2026
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
History
Radar Score of quay.io/prometheus/alertmanager across its scanned digests, one point per day (the last scan of the day), last 90 days. Hover a point for its date, digest and advisory data.
Findings
5 distinct on the current digest
Findings for digest 690c7b525f43 as scanned on 2 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 2 Sept 2026. Other architectures may differ.
| Advisory | Package | Fixed in | Contribution | EPSS | Since |
|---|---|---|---|---|---|
| GHSA-vp52-pcj8-j9qc gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation | google.golang.org/grpc@v1.82.1golang | 1.83.1 | 9/100 | — | 2 Sept 2026 |
| GO-2026-6303 Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh | golang.org/x/crypto@v0.54.0golang | 0.55.0 | 6/100 | 0.003 (25th pct) | 2 Sept 2026 |
| GO-2026-6180 Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb | golang.org/x/mod@v0.38.0golang | 0.40.0 | 6/100 | 0.003 (22th pct) | 2 Sept 2026 |
| GO-2026-6179 Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog | golang.org/x/mod@v0.38.0golang | 0.40.0 | 4/100 | 0.001 (1th pct) | 2 Sept 2026 |
| GO-2026-5932 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues | golang.org/x/crypto@v0.54.0golang | no fix listed | 4/100 | — | 2 Sept 2026 |
Tags and digests
Tags observed in indexed charts’ default renders and the digest each resolved to when last seen. A tag can move; the digest is what was scanned.
Used by
Charts whose default render references this repository, with the workload that carries it.
- prometheusprometheus-community
- alertmanagerprometheus-community