StackRadar

apache/shenyu-bootstrap:2.4.2 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/shenyu-bootstrap

apache/shenyu-bootstrap:2.4.2 resolved to 0bd3b25c4be4, scanned 14 Sept 2026: 276 findings, 11 critical, 5 on KEV; deployed by 3 charts, among them shenyu, shenyu and shenyu.

Radar Score

6,3231128120117

276 findings on digest 0bd3b25c4be4 · scanned 14 Sept 2026

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.4.2resolves to0bd3b25c4be43 charts5 days ago11281201176,323

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

High findings

28 distinct on this digest

High: findings whose contribution to the Radar Score is 40–69. Show every band

Findings for digest 0bd3b25c4be4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighGHSA-2p3x-qw9c-25hhxstream@1.4.11.11.4.16
HighGHSA-7chv-rrw6-w6fcxstream@1.4.11.11.4.17
HighGHSA-4wrc-f8pq-fpqpspring-web@5.2.2.RELEASE6.0.0
HighGHSA-jfvx-7wrx-43fhxstream@1.4.11.11.4.15
HighGHSA-g5vr-rgqm-vf78spring-webflux@5.2.2.RELEASEno fix listed
HighALPINE-CVE-2021-23840openssl@1.1.1b-r11.1.1j-r0
HighGHSA-4cch-wxpw-8p28xstream@1.4.11.11.4.15
HighGHSA-4hrm-m67v-5cxrxstream@1.4.11.11.4.16
HighGHSA-vp5x-3v8r-qprwdubbo@2.7.82.7.15
HighGHSA-hwpc-8xqv-jvj4xstream@1.4.11.11.4.16
HighGHSA-hrcp-8f3q-4w2cxstream@1.4.11.11.4.16
HighALPINE-CVE-2021-3449openssl@1.1.1b-r11.1.1k-r0
HighGHSA-crf3-v9rr-v7hjfastjson@1.2.70no fix listed
HighGHSA-hh32-7344-cg2fspring-security-web@5.2.1.RELEASE5.4.11
HighGHSA-hh32-7344-cg2fspring-security-core@5.2.1.RELEASE5.4.11
HighGHSA-59jw-jqf4-3wq3xstream@1.4.11.11.4.16
HighGHSA-rvwf-54qp-4r6vsnakeyaml@1.251.26
HighGHSA-f6hm-88x3-mfjvxstream@1.4.11.11.4.16
HighGHSA-pv7h-hx5h-mgfjfastjson@1.2.701.2.83
HighGHSA-558x-2xjg-6232spring-expression@5.2.2.RELEASE5.2.20.RELEASE
HighGHSA-g5w6-mrj7-75h2xstream@1.4.11.11.4.18
HighGHSA-p8pq-r894-fm8fxstream@1.4.11.11.4.18
HighGHSA-288c-cq4h-88gqjackson-databind@2.10.12.10.5.1
HighALPINE-CVE-2019-12900bzip2@1.0.6-r61.0.6-r7
HighGHSA-hvv8-336g-rx3mxstream@1.4.11.11.4.16
HighGHSA-xw4p-crpj-vjx2xstream@1.4.11.11.4.18
HighGHSA-74cv-f58x-f9wfxstream@1.4.11.11.4.16
HighGHSA-cqqj-4p63-rrmmnetty-codec-http@4.1.43.Final4.1.44

Used by

3 charts
ChartVersionTagContainers
shenyuerdeng2.4.212.4.21
shenyushenyu-helm-chart-test2.4.272.4.21
shenyutest-helm2.4.212.4.21

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.