alexandreroman/hello:latest container image
Docker HubScanned 28 Sept 2026
Deployed by 2 of 17,926 indexed charts (latest versions) at this tag.Docker Hub all tags of alexandreroman/hello
alexandreroman/hello:latest resolved to 4b79473442be, scanned 28 Sept 2026: 10,981 findings, 56 critical, 46 on KEV; deployed by 2 charts, among them spring-boot-helm-starter and spring-boot-helm-starter.
Radar Score
10,981 findings on digest 4b79473442be · scanned 28 Sept 2026
KEV ×46 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest 4b79473442be as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | UBUNTU-CVE-2020-1472KEV | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.20 |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-beans | 5.2.20.RELEASE |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-webmvc | 5.2.20.RELEASE |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-boot-starter-web | 2.5.12 |
| Critical | GHSA-83qj-6fr2-vhqgKEV | tomcat-embed-core | 9.0.99 |
| Critical | GHSA-c9hw-wf7x-jp9jKEV | tomcat-embed-core | 9.0.31 |
| Critical | UBUNTU-CVE-2022-2068 | openssl | 1.1.1-1ubuntu2.1~18.04.19 |
| Critical | UBUNTU-CVE-2022-2068 | openssl1.0 | 1.0.2n-1ubuntu5.10 |
| Critical | UBUNTU-CVE-2020-15999KEV | freetype | 2.8.1-2ubuntu2.1 |
| Critical | UBUNTU-CVE-2021-3711 | openssl | 1.1.1-1ubuntu2.1~18.04.13 |
| Critical | UBUNTU-CVE-2022-1292 | openssl | 1.1.1-1ubuntu2.1~18.04.17 |
| Critical | UBUNTU-CVE-2022-1292 | openssl1.0 | 1.0.2n-1ubuntu5.9 |
| Critical | UBUNTU-CVE-2023-38408 | openssh | 1:7.6p1-4ubuntu0.7+esm1 |
| Critical | UBUNTU-CVE-2021-3493KEV | linux | 4.15.0-142.146 |
| Critical | UBUNTU-CVE-2023-4863KEV | libwebp | 0.6.1-2ubuntu0.18.04.2+esm1 |
| Critical | UBUNTU-CVE-2023-5217KEV | libvpx | 1.7.0-3ubuntu0.18.04.1+esm1 |
| Critical | UBUNTU-CVE-2022-29155 | openldap | 2.4.45+dfsg-1ubuntu1.11 |
| Critical | UBUNTU-CVE-2021-22555KEV | linux | 4.15.0-144.148 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | UBUNTU-CVE-2025-27363KEV | freetype | 2.8.1-2ubuntu2.2+esm1 |
| Critical | UBUNTU-CVE-2022-23521 | git | 1:2.17.1-1ubuntu0.15 |
| Critical | UBUNTU-CVE-2025-48384KEV | git | 1:2.17.1-1ubuntu0.18+esm2 |
| Critical | UBUNTU-CVE-2021-44142 | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.28 |
| Critical | UBUNTU-CVE-2023-0266KEV | linux | 4.15.0-208.220 |
| Critical | UBUNTU-CVE-2025-1094 | postgresql-10 | 10.23-0ubuntu0.18.04.2+esm3 |
| Critical | UBUNTU-CVE-2019-13272KEV | linux | 4.15.0-58.64 |
| Critical | UBUNTU-CVE-2021-1048KEV | linux | 4.15.0-126.129 |
| Critical | UBUNTU-CVE-2021-3156KEV | sudo | 1.8.21p2-3ubuntu1.4 |
| Critical | UBUNTU-CVE-2022-0492KEV | linux | 4.15.0-173.182 |
| Critical | UBUNTU-CVE-2024-1086KEV | linux | 4.15.0-223.235 |
| Critical | UBUNTU-CVE-2024-36971KEV | linux | 4.15.0-230.242 |
| Critical | UBUNTU-CVE-2024-53104KEV | linux | 4.15.0-235.247 |
| Critical | UBUNTU-CVE-2024-53197KEV | linux | 4.15.0-239.251 |
| Critical | UBUNTU-CVE-2026-31431KEV | linux | 4.15.0-250.262 |
| Critical | UBUNTU-CVE-2022-0435 | linux | 4.15.0-173.182 |
| Critical | UBUNTU-CVE-2021-25216 | bind9 | 1:9.11.3+dfsg-1ubuntu1.15 |
| Critical | UBUNTU-CVE-2019-14287 | sudo | 1.8.21p2-3ubuntu1.1 |
| Critical | UBUNTU-CVE-2019-8457 | sqlite3 | 3.22.0-1ubuntu0.1 |
| Critical | UBUNTU-CVE-2019-8457 | db5.3 | 5.3.28-13.1ubuntu1.1 |
| Critical | UBUNTU-CVE-2023-44487KEV | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| Critical | UBUNTU-CVE-2023-50387 | bind9 | 1:9.11.3+dfsg-1ubuntu1.19+esm3 |
| Critical | UBUNTU-CVE-2023-50387 | unbound | no fix listed |
| Critical | UBUNTU-CVE-2022-41903 | git | 1:2.17.1-1ubuntu0.15 |
| Critical | UBUNTU-CVE-2019-11477 | linux | 4.15.0-52.56 |
| Critical | UBUNTU-CVE-2025-38352KEV | linux | 4.15.0-243.255 |
| Critical | UBUNTU-CVE-2025-10230 | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
| Critical | GHSA-8wx2-9q48-vm9r | spring-webmvc | 5.1.13.RELEASE |
| Critical | UBUNTU-CVE-2021-21300 | git | 1:2.17.1-1ubuntu0.8 |
| Critical | GHSA-m7jv-hq7h-mq7c | tomcat-embed-websocket | 9.0.37 |
| Critical | UBUNTU-CVE-2020-36221 | openldap | 2.4.45+dfsg-1ubuntu1.9 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| spring-boot-helm-starterspring-boot-helm-starter | 0.1.0 | latest | 1 |
| spring-boot-helm-startertest | 0.1.0 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.