apache/shenyu-bootstrap:2.5.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/shenyu-bootstrap
apache/shenyu-bootstrap:2.5.1 resolved to 1bd5756f6273, scanned 14 Sept 2026: 259 findings, 3 critical, 1 on KEV; deployed by 1 chart, among them shenyu.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
259 distinct on this digest
Findings for digest 1bd5756f6273 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-93wv-jw9v-4972 | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-6jqx-86gh-f27w | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk15on | 1.78 |
| Low | GHSA-jjfh-589g-3hjx | spring-boot-actuator | 2.7.18 |
| Low | GHSA-mvh2-crg5-v77c | netty-codec-http | 4.1.136.Final |
| Low | GHSA-vhch-2wf3-m8rp | netty-codec-stomp | 4.1.136.Final |
| Low | GHSA-h383-gmxw-35v2 | log4j-1.2-api | 2.25.4 |
| Low | GHSA-hr32-mgpm-qf2f | resteasy-client | 3.14.0.Final |
| Low | GHSA-269q-hmxg-m83q | netty-codec-http | 4.1.77.Final |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-x23c-287f-qqv5 | spring-webflux | no fix listed |
| Low | GHSA-xwmg-2g98-w7v9 | nimbus-jose-jwt | 9.37.4 |
| Low | GHSA-8xfc-gm6g-vgpv | bcprov-jdk15on | 1.78 |
| Low | GHSA-676x-f7gg-47vc | netty-resolver-dns | 4.1.135.Final |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | no fix listed |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk15on | 1.84 |
| Low | GHSA-4h8f-2wvx-gg5w | bcprov-jdk15on | 1.78 |
| Low | GHSA-2qj4-mmr9-4v2f | netty-transport-sctp | 4.1.137.Final |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-jdk15on | no fix listed |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-ext-jdk15on | 1.73 |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | no fix listed |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | no fix listed |
| Low | ALPINE-CVE-2021-23839 | openssl | 1.1.1j-r0 |
| Low | GHSA-4265-ccf5-phj5 | commons-compress | 1.26.0 |
| Low | ALPINE-CVE-2020-14344 | libx11 | 1.6.10-r0 |
| Low | GHSA-fmxf-pm6p-7xgm | async-http-client | 2.15.0 |
| Low | GHSA-cphf-4846-3xx9 | vertx-core | 4.5.24 |
| Low | GHSA-2rmj-mq67-h97g | spring-web | 5.3.38 |
| Low | ALPINE-CVE-2019-1547 | openssl | 1.1.1d-r0 |
| Low | GHSA-xxqh-mfjm-7mv9 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-4cx2-fc23-5wg6 | bcpkix-jdk15on | 1.79 |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-jdk15on | no fix listed |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-ext-jdk15on | no fix listed |
| Low | GHSA-775g-4xr8-78h8 | spring-expression | no fix listed |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | ALPINE-CVE-2020-28928 | musl | 1.1.20-r6 |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | GHSA-cmxv-58fp-fm3g | async-http-client | 2.14.5 |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-5843-p793-ghmm | spring-webflux | no fix listed |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.3.15 |
| Low | GHSA-wf66-mphr-4c4r | kafka-clients | 3.9.2 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-4gc7-5j7h-4qph | spring-context | no fix listed |
| Low | GHSA-4gc7-5j7h-4qph | spring-web | no fix listed |
| Low | GHSA-c2gf-v879-257j | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-4g9r-vxhx-9pgx | commons-compress | 1.26.0 |
| Low | GHSA-84h7-rjj3-6jx4 | netty-codec-http | 4.1.129.Final |
| Low | GHSA-4q2v-9p7v-3v22 | reactor-netty-http | 1.2.8 |