apache/shenyu-bootstrap:2.5.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/shenyu-bootstrap

apache/shenyu-bootstrap:2.5.1 resolved to 1bd5756f6273, scanned 14 Sept 2026: 259 findings, 3 critical, 1 on KEV; deployed by 1 chart, among them shenyu.

Radar Score

4,2913896152

259 findings on digest 1bd5756f6273 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.5.1resolves to	1bd5756f6273	1 chart	5 days ago	3896152	4,291

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

259 distinct on this digest

Findings for digest 1bd5756f6273 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.29	2.0
Critical	ALPINE-CVE-2019-8457	sqlite@3.26.0-r3	3.28.0-r0
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.20	6.0.0
High	GHSA-g5vr-rgqm-vf78	spring-webflux@5.3.20	no fix listed
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	GHSA-crf3-v9rr-v7hj	fastjson@1.2.83	no fix listed
High	ALPINE-CVE-2019-12900	bzip2@1.0.6-r6	1.0.6-r7
High	GHSA-6x49-w35h-wqrj	dubbo@3.1.1	3.1.11
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.38.Final	4.1.44
Medium	GHSA-cx7f-g6mp-7hqm	spring-webflux@5.3.20	no fix listed
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.6	2.8.9
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.2.1	6.4.0
Medium	GHSA-j563-grx4-pjpv	xstream@1.4.18	1.4.20
Medium	GHSA-933g-v89r-x8pf	dubbo@3.1.1	3.1.5
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.38.Final	4.1.46
Medium	GHSA-wm47-8v5p-wjpj	netty-codec-http2@4.1.38.Final	4.1.60.Final
Medium	ALPINE-CVE-2019-5018	sqlite@3.26.0-r3	3.28.0-r0
Medium	GHSA-mmmh-wcxm-2wr4	spring-security-core@5.6.5	5.6.9
Medium	GHSA-rmr5-cpv2-vgjf	xstream@1.4.18	1.4.19
Medium	GHSA-r7pg-v2c8-mfg3	avro@1.10.2	1.11.4
Medium	GHSA-3h6f-g5f3-gc4w	spring-security-config@5.6.5	5.6.12
Medium	GHSA-9vjp-v76f-g363	netty-codec@4.1.38.Final	4.1.68.Final
Medium	ALPINE-CVE-2019-14697	musl@1.1.20-r4	1.1.20-r5
Medium	GHSA-grg4-wf29-r9vv	netty-codec@4.1.38.Final	4.1.68.Final
Medium	GHSA-p2v9-g2qv-p635	netty-handler@4.1.38.Final	4.1.45
Medium	ALPINE-CVE-2019-1551	openssl@1.1.1b-r1	1.1.1d-r2
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.20	5.3.32
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.11.2	2.12.6.1
Medium	ALPINE-CVE-2020-28196	krb5@1.15.5-r0	1.15.5-r1
Medium	ALPINE-CVE-2020-11655	sqlite@3.26.0-r3	3.28.0-r3
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1b-r1	1.1.1j-r0
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1b-r1	1.1.1i-r0
Medium	ALPINE-CVE-2019-19244	sqlite@3.26.0-r3	3.28.0-r2
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.20	5.3.33
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@5.6.5	5.7.13
Medium	GHSA-7286-pgfv-vxvh	zookeeper@3.5.7	3.7.2
Medium	GHSA-668q-qrv7-99fm	logback-core@1.2.3	1.2.9
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.13.2.1	2.13.4.2
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.13.2.1	2.13.4
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.15.3	3.25.5
Medium	ALPINE-CVE-2019-16168	sqlite@3.26.0-r3	3.28.0-r1
Medium	ALPINE-CVE-2019-2201	libjpeg-turbo@1.5.3-r4	1.5.3-r6
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.29	1.31
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.6.8	2.6.15
Medium	GHSA-jq43-27x9-3v86	netty-codec-smtp@4.1.77.Final	4.1.128.Final
Medium	GHSA-mvr2-9pj6-7w5j	guava@21.0	24.1.1-android
Medium	GHSA-f256-j965-7f32	netty-codec-http2@4.1.38.Final	4.1.61.Final

Used by

1 chart

Chart	Version	Tag	Containers
shenyushenyu	0.6.3	2.5.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.