quay.io/prometheus/pushgateway
container imageDeployed by 1 of 300 indexed charts (latest versions).Counts say nothing about images outside the indexed set.
Radar Score
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 17
- On CISA KEV
- 0
- Exploited (EPSS ≥ 0.1)
- 0
17 findings on digest 74fa117cef2d · scanned 2 Sept 2026
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
History
Radar Score of quay.io/prometheus/pushgateway across its scanned digests, one point per day (the last scan of the day), last 90 days. Hover a point for its date, digest and advisory data.
Findings
17 distinct on the current digest
Findings for digest 74fa117cef2d as scanned on 2 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 2 Sept 2026. Other architectures may differ.
| Advisory | Package | Fixed in | Contribution | EPSS | Since |
|---|---|---|---|---|---|
| GO-2026-5026 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | stdlib@go1.26.3golang | 1.25.13 | 8/100 | 0.007 (50th pct) | 2 Sept 2026 |
| GO-2026-5037 Inefficient candidate hostname parsing in crypto/x509 | stdlib@go1.26.3golang | 1.25.11 | 7/100 | 0.006 (46th pct) | 2 Sept 2026 |
| GO-2026-5972 Enforce maximum recursion depth in encoding/asn1 | stdlib@go1.26.3golang | 1.25.13 | 7/100 | 0.006 (45th pct) | 2 Sept 2026 |
| GO-2026-6088 Add recursion depth guard during decode in encoding/xml | stdlib@go1.26.3golang | 1.25.13 | 7/100 | 0.006 (45th pct) | 2 Sept 2026 |
| GO-2026-6089 Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http | stdlib@go1.26.3golang | 1.25.13 | 7/100 | 0.006 (45th pct) | 2 Sept 2026 |
| GO-2026-6090 Limit handshake messages we are willing to accept post-handshake in crypto/tls | stdlib@go1.26.3golang | 1.25.13 | 7/100 | 0.006 (45th pct) | 2 Sept 2026 |
| GO-2026-5038 Quadratic complexity in WordDecoder.DecodeHeader in mime | stdlib@go1.26.3golang | 1.25.11 | 7/100 | 0.006 (44th pct) | 2 Sept 2026 |
| GO-2026-5942 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | golang.org/x/net@v0.55.0golang | 0.56.0 | 7/100 | 0.005 (44th pct) | 2 Sept 2026 |
| GO-2026-5942 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | stdlib@go1.26.3golang | 1.26.6 | 7/100 | 0.005 (44th pct) | 2 Sept 2026 |
| GO-2026-6218 Avoid quadratic complexity in resolvePath in net/url | stdlib@go1.26.3golang | 1.25.13 | 7/100 | 0.005 (42th pct) | 2 Sept 2026 |
| GO-2026-5970 Infinite loop on invalid input in golang.org/x/text | golang.org/x/text@v0.37.0golang | 0.39.0 | 7/100 | 0.005 (39th pct) | 2 Sept 2026 |
| GO-2026-5856 Invoking Encrypted Client Hello privacy leak in crypto/tls | stdlib@go1.26.3golang | 1.25.12 | 6/100 | 0.004 (31th pct) | 2 Sept 2026 |
| GO-2026-5039 Arbitrary inputs are included in errors without any escaping in net/textproto | stdlib@go1.26.3golang | 1.25.11 | 6/100 | 0.004 (30th pct) | 2 Sept 2026 |
| GO-2026-6303 Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh | golang.org/x/crypto@v0.52.0golang | 0.55.0 | 6/100 | 0.003 (25th pct) | 2 Sept 2026 |
| GO-2026-6091 Fix Javascript regexp context tracking in html/template | stdlib@go1.26.3golang | 1.25.13 | 6/100 | 0.003 (23th pct) | 2 Sept 2026 |
| GO-2026-4970 Root escape via symlink plus trailing slash in os | stdlib@go1.26.3golang | 1.25.12 | 5/100 | 0.002 (14th pct) | 2 Sept 2026 |
| GO-2026-5932 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues | golang.org/x/crypto@v0.52.0golang | no fix listed | 4/100 | — | 2 Sept 2026 |
Tags and digests
Tags observed in indexed charts’ default renders and the digest each resolved to when last seen. A tag can move; the digest is what was scanned.
Used by
Charts whose default render references this repository, with the workload that carries it.
- prometheusprometheus-community