amazon/opendistro-for-elasticsearch:1.4.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of amazon/opendistro-for-elasticsearch

amazon/opendistro-for-elasticsearch:1.4.0 resolved to 6df71eb04639, scanned 14 Sept 2026: 191 findings, 4 critical, 2 on KEV; deployed by 1 chart, among them opendistro-es.

Radar Score

4,7364249370

191 findings on digest 6df71eb04639 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.4.0resolves to	6df71eb04639	1 chart	7 days ago	4249370	4,736

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

191 distinct on this digest

Findings for digest 6df71eb04639 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.11.1	2.12.3
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.17	2.0
High	GHSA-8489-44mv-ggj8	log4j-core@2.11.1	2.12.4
High	GHSA-4w82-r329-3q67	jackson-databind@2.8.11.3	2.8.11.5
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.8.11	2.8.11.1
High	GHSA-q93h-jc49-78gg	jackson-databind@2.8.11.3	2.8.11.6
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.8.11.3	2.8.11.6
High	GHSA-qwrx-45xf-jjf7	elasticsearch@7.4.2	7.17.13
High	GHSA-59j4-wjwp-mw9m	velocity@1.7	no fix listed
High	GHSA-645p-88qh-w398	jackson-databind@2.8.11	2.8.11.3
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.17	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.8.11.3	2.9.10.8
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.8.11	2.8.11.3
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.8.11.3	2.8.11.5
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.8.11	2.8.11.3
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.8.11	2.8.11.3
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.8.11	2.8.11.3
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.8.11.3	2.8.11.4
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.8.11.3	2.8.11.4
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.8.11	2.8.11.3
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.8.11.3	2.8.11.5
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.8.11.3	2.8.11.4
High	GHSA-288c-cq4h-88gq	jackson-databind@2.8.11.3	2.9.10.7
High	GHSA-x2w5-5m2g-7h5m	jackson-databind@2.8.11	2.8.11.3
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.38.Final	4.1.44
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.8.11.3	2.9.10.8
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.8.11.3	2.9.10.8
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.8.11.3	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.8.11.3	2.9.10.4
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.0.3	5.4.0
Medium	GHSA-qr7j-h6gg-jmgc	jackson-databind@2.8.11	2.8.11.2
Medium	GHSA-mx7p-6679-8g3q	jackson-databind@2.8.11.3	2.8.11.5
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.8.11.3	2.9.10.8
Medium	GHSA-gjmw-vf9h-g25v	jackson-databind@2.8.11.3	2.8.11.5
Medium	GHSA-h3cw-g4mq-c5x2	jackson-databind@2.8.11.3	2.9.10.6
Medium	GHSA-85cw-hj65-qqv9	jackson-databind@2.8.11.3	2.8.11.5
Medium	GHSA-fmmc-742q-jg75	jackson-databind@2.8.11.3	2.8.11.5
Medium	GHSA-gwp4-hfv6-p7hw	jackson-databind@2.8.11.3	2.8.11.4
Medium	GHSA-j823-4qch-3rgm	jackson-databind@2.9.10.1	2.9.10.5
Medium	GHSA-f3j5-rmmp-3fc5	jackson-databind@2.8.11.3	2.8.11.5
Medium	GHSA-p9m8-27x8-rg87	cron-utils@7.0.5	9.1.6
Medium	GHSA-5p34-5m6p-p58g	jackson-databind@2.9.10.1	2.9.10.4
Medium	GHSA-c265-37vj-cwcc	jackson-databind@2.9.10.1	2.9.10.5
Medium	GHSA-9vvp-fxw6-jcxr	jackson-databind@2.9.10.1	2.9.10.4
Medium	GHSA-wh8g-3j2c-rqj5	jackson-databind@2.8.11.3	2.9.10.8
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.38.Final	4.1.46
Medium	GHSA-5949-rw7g-wx7w	jackson-databind@2.8.11.3	2.9.10.7
Medium	GHSA-qjw2-hr98-qgfh	jackson-databind@2.8.11.3	2.9.10.6

Used by

1 chart

Chart	Version	Tag	Containers
opendistro-eslsst-sqre	1.4.1	1.4.0	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.