apache/rocketmq:4.9.3 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/rocketmq

apache/rocketmq:4.9.3 resolved to 5ac2a4e0f627, scanned 14 Sept 2026: 86 findings, 7 critical, 4 on KEV; deployed by 1 chart, among them rocketmq.

Radar Score

2,285794030

86 findings on digest 5ac2a4e0f627 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
4.9.3resolves to	5ac2a4e0f627	1 chart	8 days ago	794030	2,285

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

86 distinct on this digest

Findings for digest 5ac2a4e0f627 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@8.5.46	no fix listed
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.30	1.32
Medium	GHSA-hh3j-x4mc-g48r	tomcat-embed-core@8.5.46	8.5.49
Medium	GHSA-wrxv-2j5q-m38w	lxml@3.2.1	4.9.1
Medium	GHSA-3cqm-mf7h-prrj	okhttp@4.9.0	4.9.2
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@8.5.46	9.0.118
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.10	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.10	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@8.5.46	8.5.94
Low	GHSA-w33c-445m-f8w7	okio@2.8.0	3.4.0
Low	GHSA-8wv5-x4w7-5gww	libthrift@0.14.1	0.24.0
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.14.1	0.23.0
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@8.5.46	9.0.118
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@8.5.46	9.0.116
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.30	1.31
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@8.5.46	9.0.118
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.69	1.78
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@8.5.46	no fix listed
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@8.5.46	no fix listed
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.69	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.69	1.84
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.69	1.78
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.69	no fix listed
Low	GHSA-vfmq-68hx-4jfw	lxml@3.2.1	6.1.0
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@8.5.46	9.0.116
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.69	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.69	no fix listed
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.10	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.10	1.5.34
Low	GHSA-7g45-4rm6-3mm3	guava@31.0.1-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.10	1.3.16
Low	GHSA-5mg8-w23w-74h3	guava@31.0.1-jre	32.0.0-android
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@8.5.46	9.0.118
Low	GHSA-p47f-322f-whfh	logback-core@1.2.10	1.5.33
Low	GHSA-6v67-2wr5-gvf4	logback-core@1.2.10	1.3.15
Low	GHSA-qqpg-mvqg-649v	logback-core@1.2.10	1.5.25

Used by

1 chart

Chart	Version	Tag	Containers
rocketmqgin	1.1.0	4.9.3	5

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.