apache/skywalking-oap-server:8.9.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/skywalking-oap-server

apache/skywalking-oap-server:8.9.1 resolved to b4ec8c18d079, scanned 14 Sept 2026: 740 findings, 11 critical, 4 on KEV; deployed by 1 chart, among them skywalking-v1.

Radar Score

11,2761121215493

740 findings on digest b4ec8c18d079 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
8.9.1resolves to	b4ec8c18d079	1 chart	6 days ago	1121215493	11,276

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

493 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest b4ec8c18d079 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-4873	curl@7.68.0-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2023-39804	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.68.Final	4.1.137.Final
Low	GO-2024-2609	stdlib@go1.16.9	1.21.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.4-1ubuntu1	5.2.4-1ubuntu1.1+esm1
Low	GO-2024-3107	stdlib@go1.16.9	1.22.7
Low	GO-2023-1751	stdlib@go1.16.9	1.19.9
Low	GO-2023-1753	stdlib@go1.16.9	1.19.9
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.12.2	2.18.8
Low	UBUNTU-CVE-2026-54411	pam@1.3.1-5ubuntu4.3	no fix listed
Low	GHSA-389x-839f-4rhx	netty-common@4.1.68.Final	4.1.118.Final
Low	UBUNTU-CVE-2026-25210	expat@2.2.9-1build1	2.2.9-1ubuntu0.8+esm1
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.68.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-19487	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0
Low	GO-2023-2041	stdlib@go1.16.9	1.20.8
Low	GO-2023-2043	stdlib@go1.16.9	1.20.8
Low	GO-2022-0515	stdlib@go1.16.9	1.17.12
Low	GO-2023-2186	stdlib@go1.16.9	1.20.11
Low	GO-2024-3333	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.12.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2024-3105	stdlib@go1.16.9	1.22.7
Low	GO-2022-1095	stdlib@go1.16.9	1.18.8
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GO-2023-1621	stdlib@go1.16.9	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.16.9	1.25.10
Low	GO-2025-3563	stdlib@go1.16.9	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.12.2	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.18	42.2.27
Low	GO-2026-4977	stdlib@go1.16.9	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2024-2610	stdlib@go1.16.9	1.21.8
Low	UBUNTU-CVE-2026-59848	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2026-4986	stdlib@go1.16.9	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4+esm3
Low	GO-2026-4918	stdlib@go1.16.9	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.53.0
Low	GO-2026-4337	stdlib@go1.16.9	1.24.13
Low	UBUNTU-CVE-2023-6004	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.68.Final	4.1.136.Final
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.40.v20210413	12.0.12
Low	GO-2026-4601	stdlib@go1.16.9	1.25.8
Low	UBUNTU-CVE-2026-72522	expat@2.2.9-1build1	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.40.v20210413	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
skywalking-v1huangchengwu-helm-chart	0.1.0	8.9.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.