apache/skywalking-oap-server:8.1.0-es7 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/skywalking-oap-server
apache/skywalking-oap-server:8.1.0-es7 resolved to 641237e0299b, scanned 14 Sept 2026: 472 findings, 12 critical, 5 on KEV; deployed by 1 chart, among them skywalking.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
472 distinct on this digest
Findings for digest 641237e0299b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-jfh8-c2jp-5v3qKEV | log4j-core | 2.12.2 |
| Critical | ALPINE-CVE-2020-15999KEV | freetype | 2.9.1-r3 |
| Critical | GHSA-7rjr-3q55-vv33KEV | log4j-core | 2.12.2 |
| Critical | GHSA-2qrg-x229-3v8q | log4j | no fix listed |
| Critical | GHSA-p6xc-xr62-6r2g | log4j-core | 2.12.3 |
| Critical | GHSA-65fg-84f6-3jq3 | log4j | no fix listed |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-f7vh-qwp3-x37m | log4j | no fix listed |
| Critical | GHSA-w9p3-5cr8-m3jj | log4j | no fix listed |
| Critical | ALPINE-CVE-2019-8457 | sqlite | 3.28.0-r0 |
| Critical | GHSA-36hp-jr8h-556f | nacos-common | 1.4.1 |
| Critical | GHSA-xv5h-v7jh-p2qh | nacos-common | 1.4.1 |
| High | GHSA-fp5r-v3w9-4333 | log4j | no fix listed |
| High | GHSA-8489-44mv-ggj8 | log4j-core | 2.12.4 |
| High | GHSA-4w82-r329-3q67 | jackson-databind | 2.9.10.3 |
| High | GHSA-26vr-8j45-3r4w | jetty-server | 9.4.39 |
| High | ALPINE-CVE-2021-23840 | openssl | 1.1.1j-r0 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | GHSA-q93h-jc49-78gg | jackson-databind | 2.9.10.4 |
| High | GHSA-p43x-xfjf-5jhr | jackson-databind | 2.9.10.4 |
| High | GHSA-qwrx-45xf-jjf7 | elasticsearch | 7.17.13 |
| High | GHSA-qppj-fm5r-hxr3KEV | golang.org/ | 0.17.0 |
| High | GHSA-4v7x-pqxf-cx7m | golang.org/ | 0.23.0 |
| High | ALPINE-CVE-2021-3449 | openssl | 1.1.1k-r0 |
| High | GHSA-645p-88qh-w398 | jackson-databind | 2.9.7 |
| High | GHSA-m394-8rww-3jr7 | jetty-server | 9.4.37 |
| High | GHSA-rvwf-54qp-4r6v | snakeyaml | 1.26 |
| High | GHSA-9gph-22xh-8x98 | jackson-databind | 2.9.10.8 |
| High | GHSA-9mxf-g3x6-wv74 | jackson-databind | 2.9.7 |
| High | GHSA-h822-r4r5-v8jg | jackson-databind | 2.9.10 |
| High | GHSA-c8hm-7hpq-7jhg | jackson-databind | 2.9.8 |
| High | GHSA-f9hv-mg5h-xcw9 | jackson-databind | 2.9.8 |
| High | GHSA-mx9v-gmh4-mgqw | jackson-databind | 2.9.8 |
| High | GHSA-mph4-vhrx-mv67 | jackson-databind | 2.9.9.1 |
| High | GHSA-5ww9-j83m-q7qx | jackson-databind | 2.9.9 |
| High | GHSA-x3rh-m7vp-35f2 | jetty-server | 9.4.30.v20200611 |
| High | GHSA-4gq5-ch57-c2mg | jackson-databind | 2.9.7 |
| High | GHSA-ffhg-7mh4-33c4 | golang.org/ | 0.0.0-20200220183623-bac4c82f6975 |
| High | GHSA-gww7-p5w4-wrfv | jackson-databind | 2.9.10.2 |
| High | GHSA-6fpp-rgj9-8rwc | jackson-databind | 2.9.9.2 |
| High | GHSA-288c-cq4h-88gq | jackson-databind | 2.9.10.7 |
| High | ALPINE-CVE-2019-12900 | bzip2 | 1.0.6-r7 |
| High | GHSA-x2w5-5m2g-7h5m | jackson-databind | 2.9.7 |
| High | GHSA-cqqj-4p63-rrmm | netty-codec-http | 4.1.44 |
| High | GHSA-cqqj-4p63-rrmm | netty | no fix listed |
| High | GHSA-5r5r-6hpj-8gg9 | jackson-databind | 2.9.10.8 |
| High | GO-2022-0535KEV | stdlib | 1.12.16 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | GHSA-f9xh-2qgp-cq57 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-4jrv-ppp4-jm57 | gson | 2.8.9 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| skywalkingkubesphere-testVerified publisher | 3.1.0 | 8.1.0-es7 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.