apache/shenyu-bootstrap:2.4.2 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/shenyu-bootstrap

apache/shenyu-bootstrap:2.4.2 resolved to 0bd3b25c4be4, scanned 14 Sept 2026: 276 findings, 11 critical, 5 on KEV; deployed by 3 charts, among them shenyu, shenyu and shenyu.

Radar Score

6,3231128120117

276 findings on digest 0bd3b25c4be4 · scanned 14 Sept 2026

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.4.2resolves to	0bd3b25c4be4	3 charts	5 days ago	1128120117	6,323

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

276 distinct on this digest

Findings for digest 0bd3b25c4be4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.2.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-webflux@2.2.2.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webflux@5.2.2.RELEASE	5.2.20.RELEASE
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
Critical	GHSA-j9h8-phrw-h4fhKEV	xstream@1.4.11.1	1.4.18
Critical	GHSA-qmfc-6www-fjqw	dubbo@2.7.8	2.7.10
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.25	2.0
Critical	GHSA-7wfc-x4f7-gg2x	dubbo@2.7.8	2.7.10
Critical	GHSA-mw36-7c6c-q4q2	xstream@1.4.11.1	1.4.14-java7
Critical	ALPINE-CVE-2019-8457	sqlite@3.26.0-r3	3.28.0-r0
Critical	GHSA-8wx2-9q48-vm9r	spring-webflux@5.2.2.RELEASE	5.2.3.RELEASE
High	GHSA-2p3x-qw9c-25hh	xstream@1.4.11.1	1.4.16
High	GHSA-7chv-rrw6-w6fc	xstream@1.4.11.1	1.4.17
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.2.RELEASE	6.0.0
High	GHSA-jfvx-7wrx-43fh	xstream@1.4.11.1	1.4.15
High	GHSA-g5vr-rgqm-vf78	spring-webflux@5.2.2.RELEASE	no fix listed
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	GHSA-4cch-wxpw-8p28	xstream@1.4.11.1	1.4.15
High	GHSA-4hrm-m67v-5cxr	xstream@1.4.11.1	1.4.16
High	GHSA-vp5x-3v8r-qprw	dubbo@2.7.8	2.7.15
High	GHSA-hwpc-8xqv-jvj4	xstream@1.4.11.1	1.4.16
High	GHSA-hrcp-8f3q-4w2c	xstream@1.4.11.1	1.4.16
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	GHSA-crf3-v9rr-v7hj	fastjson@1.2.70	no fix listed
High	GHSA-hh32-7344-cg2f	spring-security-web@5.2.1.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-core@5.2.1.RELEASE	5.4.11
High	GHSA-59jw-jqf4-3wq3	xstream@1.4.11.1	1.4.16
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.25	1.26
High	GHSA-f6hm-88x3-mfjv	xstream@1.4.11.1	1.4.16
High	GHSA-pv7h-hx5h-mgfj	fastjson@1.2.70	1.2.83
High	GHSA-558x-2xjg-6232	spring-expression@5.2.2.RELEASE	5.2.20.RELEASE
High	GHSA-g5w6-mrj7-75h2	xstream@1.4.11.1	1.4.18
High	GHSA-p8pq-r894-fm8f	xstream@1.4.11.1	1.4.18
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.1	2.10.5.1
High	ALPINE-CVE-2019-12900	bzip2@1.0.6-r6	1.0.6-r7
High	GHSA-hvv8-336g-rx3m	xstream@1.4.11.1	1.4.16
High	GHSA-xw4p-crpj-vjx2	xstream@1.4.11.1	1.4.18
High	GHSA-74cv-f58x-f9wf	xstream@1.4.11.1	1.4.16
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.43.Final	4.1.44
Medium	GHSA-q897-9jxf-jg9r	dubbo@2.7.8	2.7.13
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.0	2.8.9
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.2.1	5.4.0
Medium	GHSA-2g86-r6w2-wqqr	nacos-client@2.0.0	no fix listed
Medium	GHSA-j563-grx4-pjpv	xstream@1.4.11.1	1.4.20
Medium	GHSA-933g-v89r-x8pf	dubbo@2.7.8	2.7.22
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.38.Final	4.1.46
Medium	GHSA-wm47-8v5p-wjpj	netty-codec-http2@4.1.38.Final	4.1.60.Final
Medium	GHSA-5mc7-m686-p6jg	dubbo@2.7.8	2.7.10
Medium	ALPINE-CVE-2019-5018	sqlite@3.26.0-r3	3.28.0-r0
Medium	GHSA-rmr5-cpv2-vgjf	xstream@1.4.11.1	1.4.19

Used by

3 charts

Chart	Version	Tag	Containers
shenyuerdeng	2.4.21	2.4.2	1
shenyushenyu-helm-chart-test	2.4.27	2.4.2	1
shenyutest-helm	2.4.21	2.4.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.