apache/fineract:1.12.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/fineract
apache/fineract:1.12.1 resolved to a83cf1980609, scanned 14 Sept 2026: 167 findings, 3 critical; deployed by 2 charts, among them fineract and fineract.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
167 distinct on this digest
Findings for digest a83cf1980609 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | no fix listed |
| Low | GHSA-9342-92gg-6v29 | jakarta.mail | 2.0.2 |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-rqfh-9r24-8c9r | assertj-core | 3.27.7 |
| Low | GHSA-5qcv-4rpc-jp93 | kafka-clients | 3.9.2 |
| Low | GHSA-xq69-5h5v-x9x4 | spring-kafka | 3.3.16 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | GHSA-hq9p-pm7w-8p54 | postgresql | 42.7.7 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | GHSA-fv25-8xcx-gqjc | tomcat-embed-core | 10.1.55 |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.3.7-r0 |
| Low | ALPINE-CVE-2025-69419 | openssl | 3.3.6-r0 |
| Low | GHSA-23hv-mwm6-g8jf | tomcat-embed-core | 10.1.42 |
| Low | GHSA-563x-q5rq-57qp | tomcat-embed-core | 10.1.52 |
| Low | GHSA-mgp5-rv84-w37q | tomcat-embed-core | 10.1.52 |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-mgvc-8q2h-5pgc | spring-boot-starter-actuator | no fix listed |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 10.1.55 |
| Low | GHSA-jmp9-x22r-554x | spring-core | 6.2.11 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-rv64-5gf8-9qq8 | tomcat-embed-core | 10.1.54 |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | GHSA-x4m4-345f-5h5g | tomcat-embed-core | 10.1.54 |
| Low | GHSA-93wv-jw9v-4972 | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-6jqx-86gh-f27w | netty-codec-http | 4.1.136.Final |
| Low | GHSA-8hfc-fq58-r658 | spring-boot-starter-actuator | no fix listed |
| Low | GHSA-8v5q-rhf3-jphm | spring-security-core | 6.4.10 |
| Low | GHSA-mvh2-crg5-v77c | netty-codec-http | 4.1.136.Final |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 10.1.50 |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 10.1.47 |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | 6.2.19 |
| Low | GHSA-xwmg-2g98-w7v9 | nimbus-jose-jwt | 9.37.4 |
| Low | GHSA-6r3c-xf4w-jxjm | spring-web | 6.2.8 |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | 3.4.5 |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.3.6-r0 |
| Low | GHSA-42wg-hm62-jcwg | tomcat-embed-core | 10.1.42 |
| Low | GHSA-88fw-v6x4-3f58 | spring-data-commons | no fix listed |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | no fix listed |
| Low | GHSA-x863-p983-p4f7 | spring-jms | 6.2.19 |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | 6.2.19 |
| Low | GHSA-j92g-9f8w-j867 | postgresql | 42.7.12 |
| Low | GHSA-xxqh-mfjm-7mv9 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 10.1.53 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | GHSA-72hv-8253-57qq | jackson-core | 2.18.6 |