StackRadar

apache/nifi-registry:1.14.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/nifi-registry

apache/nifi-registry:1.14.0 resolved to 090b7f87ec7f, scanned 14 Sept 2026: 259 findings, 8 critical, 4 on KEV; deployed by 1 chart, among them nifi-registry.

Radar Score

4,6218887156

259 findings on digest 090b7f87ec7f · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.14.0resolves to090b7f87ec7f1 chart8 days ago88871564,621

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

87 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 090b7f87ec7f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@5.3.8no fix listed
MediumDSA-5169-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u3
MediumDLA-3807-1glibc@2.28-102.28-10+deb10u3
MediumDSA-4963-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u7
MediumDLA-3804-1nghttp2@1.36.0-2+deb10u11.36.0-2+deb10u3
MediumGHSA-3f7h-mf4q-vrm4woodstox-core@6.2.46.4.0
MediumDSA-5139-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u2
MediumDLA-3449-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u8
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u62.4.47+dfsg-3+deb10u7
MediumDSA-4875-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u6
MediumGHSA-mm9x-g8pc-w292netty-handler@4.1.33.Final4.1.46
MediumGHSA-wm47-8v5p-wjpjnetty-codec-http2@4.1.33.Final4.1.60.Final
MediumDLA-3325-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u4
MediumGHSA-fhw8-8j55-vwgqsshd-core@2.6.02.9.2
MediumGHSA-fhw8-8j55-vwgqsshd-common@2.6.02.9.2
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumDSA-4855-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u5
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.33.Final4.1.68.Final
MediumGHSA-7phw-cxx7-q9vqspring-webmvc@5.3.85.3.26
MediumGHSA-w9jg-gvgr-354mspring-security-core@5.5.05.5.1
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.33.Final4.1.68.Final
MediumGHSA-g5mm-vmx4-3rg7spring-context@5.3.55.3.19
MediumGHSA-p2v9-g2qv-p635netty-handler@4.1.33.Final4.1.45
MediumGHSA-ccgv-vj62-xf9hspring-web@5.3.85.3.32
MediumDLA-3085-1curl@7.64.0-4+deb10u27.64.0-4+deb10u3
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.12.32.12.6.1
MediumGHSA-3p86-9955-h393org.eclipse.jgit@5.11.1.202105131744-r5.13.3.202401111512-r
MediumDLA-3172-1libxml2@2.9.4+dfsg1-7+deb10u22.9.4+dfsg1-7+deb10u5
MediumGHSA-7rpj-hg47-cx62h2@1.4.1992.0.202
MediumDLA-3101-1libxslt@1.1.32-2.2~deb10u11.1.32-2.2~deb10u2
MediumGHSA-hgjh-9rj2-g67jspring-web@5.3.85.3.33
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.64.5.13
MediumGHSA-c4q5-6c82-3qpwspring-security-web@5.5.05.7.13
MediumGHSA-9279-7hph-r3xwsshd-core@2.6.02.7.0
MediumGHSA-668q-qrv7-99fmlogback-core@1.2.31.2.9
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.12.32.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.12.32.12.7.1
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.281.31
MediumDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
MediumGHSA-g5h3-w546-pj7fspring-boot-actuator-autoconfigure@2.5.12.5.15
MediumGHSA-f256-j965-7f32netty-codec-http2@4.1.33.Final4.1.61.Final
MediumGHSA-hh26-6xwr-ggv7spring-beans@5.3.55.3.20
MediumDLA-3559-1libssh2@1.8.0-2.11.8.0-2.1+deb10u1
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.33.Final4.1.132.Final
MediumGHSA-wx5j-54mm-rqqqnetty-codec-http@4.1.33.Final4.1.71.Final
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.281.32
MediumGHSA-6mjq-h674-j845netty-handler@4.1.33.Final4.1.94.Final
MediumDSA-4944-1krb5@1.17-3+deb10u11.17-3+deb10u2
MediumGHSA-2wrp-6fg6-hmc5spring-web@5.3.85.3.34

Used by

1 chart
ChartVersionTagContainers
nifi-registryprofyu1.14.0-r0011.14.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.