apache/shenyu-admin:2.4.2 container image
Docker HubScanned 14 Sept 2026
Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/shenyu-admin
apache/shenyu-admin:2.4.2 resolved to e8b7c4ddd069, scanned 14 Sept 2026: 267 findings, 17 critical, 7 on KEV; deployed by 3 charts, among them shenyu, shenyu and shenyu.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
267 distinct on this digest
Findings for digest e8b7c4ddd069 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-beans | 5.2.20.RELEASE |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-boot-starter-web | 2.5.12 |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-webmvc | 5.2.20.RELEASE |
| Critical | GHSA-83qj-6fr2-vhqgKEV | tomcat-embed-core | 9.0.99 |
| Critical | GHSA-c9hw-wf7x-jp9jKEV | tomcat-embed-core | 9.0.31 |
| Critical | ALPINE-CVE-2020-15999KEV | freetype | 2.9.1-r3 |
| Critical | GHSA-v98j-7crc-wvrj | shiro-spring-boot-starter | 1.7.1 |
| Critical | GHSA-v98j-7crc-wvrj | shiro-spring | 1.7.1 |
| Critical | GHSA-v98j-7crc-wvrj | shiro-web | 1.7.1 |
| Critical | GHSA-f6jp-j6w3-w9hm | shiro-core | 1.8.0 |
| Critical | GHSA-45hx-wfhj-473x | h2 | 2.1.210 |
| Critical | GHSA-h376-j262-vhq6 | h2 | 2.0.206 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | ALPINE-CVE-2019-8457 | sqlite | 3.28.0-r0 |
| Critical | GHSA-5j33-cvvr-w245 | tomcat-embed-core | 9.0.98 |
| Critical | GHSA-8wx2-9q48-vm9r | spring-webmvc | 5.2.3.RELEASE |
| Critical | GHSA-m7jv-hq7h-mq7c | tomcat-embed-websocket | 9.0.37 |
| High | GHSA-4wrc-f8pq-fpqp | spring-web | 6.0.0 |
| High | GHSA-wmwf-9ccg-fff5 | tomcat-embed-core | 9.0.109 |
| High | GHSA-4cf5-xmhp-3xj7 | shiro-core | 1.9.1 |
| High | GHSA-h3gc-qfqq-6h8f | tomcat-embed-core | 9.0.106 |
| High | GHSA-g5vr-rgqm-vf78 | spring-webmvc | no fix listed |
| High | ALPINE-CVE-2021-23840 | openssl | 1.1.1j-r0 |
| High | GHSA-hfrx-6qgj-fp6c | tomcat-embed-core | 9.0.71 |
| High | GHSA-344f-f5vg-2jfj | tomcat-embed-core | 9.0.35 |
| High | GHSA-qppj-fm5r-hxr3KEV | tomcat-embed-core | 9.0.81 |
| High | ALPINE-CVE-2021-3449 | openssl | 1.1.1k-r0 |
| High | GHSA-rvwf-54qp-4r6v | snakeyaml | 1.26 |
| High | GHSA-53hp-jpwq-2jgq | tomcat-embed-core | 9.0.35 |
| High | GHSA-558x-2xjg-6232 | spring-expression | 5.2.20.RELEASE |
| High | GHSA-7w75-32cg-r6g2 | tomcat-embed-core | 9.0.86 |
| High | GHSA-j39c-c8hj-x4j3 | tomcat-embed-core | 9.0.43 |
| High | GHSA-288c-cq4h-88gq | jackson-databind | 2.10.5.1 |
| High | ALPINE-CVE-2019-12900 | bzip2 | 1.0.6-r7 |
| High | GHSA-27hp-xhwr-wr2m | tomcat-embed-core | 9.0.98 |
| High | GHSA-cqqj-4p63-rrmm | netty-codec-http | 4.1.44 |
| Medium | GHSA-4jrv-ppp4-jm57 | gson | 2.8.9 |
| Medium | GHSA-2g86-r6w2-wqqr | nacos-client | no fix listed |
| Medium | GHSA-24rp-q3w6-vc56 | postgresql | 42.2.28 |
| Medium | GHSA-2rvv-w9r2-rg7m | tomcat-embed-core | 9.0.40 |
| Medium | GHSA-9xcj-c8cr-8c3c | tomcat-embed-core | 9.0.30 |
| Medium | GHSA-mm9x-g8pc-w292 | netty-handler | 4.1.46 |
| Medium | GHSA-wm47-8v5p-wjpj | netty-codec-http2 | 4.1.60.Final |
| Medium | GHSA-qcj6-jqrg-4wp2 | thymeleaf-spring5 | 3.0.13.RELEASE |
| Medium | ALPINE-CVE-2019-5018 | sqlite | 3.28.0-r0 |
| Medium | GHSA-jgwr-3qm3-26f3 | tomcat-embed-core | 9.0.41 |
| Medium | GHSA-9vjp-v76f-g363 | netty-codec | 4.1.68.Final |
| Medium | ALPINE-CVE-2019-14697 | musl | 1.1.20-r5 |
| Medium | GHSA-grg4-wf29-r9vv | netty-codec | 4.1.68.Final |
| Medium | GHSA-45x9-q6vj-cqgq | shiro-core | 1.10.0 |