StackRadar

apache/skywalking-oap-server:8.9.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/skywalking-oap-server

apache/skywalking-oap-server:8.9.1 resolved to b4ec8c18d079, scanned 14 Sept 2026: 740 findings, 11 critical, 4 on KEV; deployed by 1 chart, among them skywalking-v1.

Radar Score

11,2761121215493

740 findings on digest b4ec8c18d079 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
8.9.1resolves tob4ec8c18d0791 chart5 days ago112121549311,276

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

215 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest b4ec8c18d079 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-8c26-wmh5-6g9vgolang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f0.0.0-20220314234659-1baeb1ce4c0b
MediumUBUNTU-CVE-2021-46848libtasn1-6@4.16.0-24.16.0-2ubuntu0.1+esm1
MediumUBUNTU-CVE-2021-36690sqlite3@3.31.1-4ubuntu0.23.31.1-4ubuntu0.3
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.0.0-20210224082022-3d97a244fca70.17.0
MediumUBUNTU-CVE-2024-45490expat@2.2.9-1build12.2.9-1ubuntu0.7
MediumUBUNTU-CVE-2021-43618gmp@2:6.2.0+dfsg-42:6.2.0+dfsg-4ubuntu0.1
MediumUBUNTU-CVE-2023-0464openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.18
MediumUBUNTU-CVE-2023-27534curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.18
MediumUBUNTU-CVE-2022-32208curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.12
MediumUBUNTU-CVE-2024-37371krb5@1.17-6ubuntu4.11.17-6ubuntu4.6
MediumUBUNTU-CVE-2022-27406freetype@2.10.1-2ubuntu0.12.10.1-2ubuntu0.2
MediumGHSA-69cg-p879-7622golang.org/x/net@v0.0.0-20210224082022-3d97a244fca70.0.0-20220906165146-f3363e06e74c
MediumGHSA-98qh-xjc8-98pqpostgresql@42.2.1842.7.11
MediumUBUNTU-CVE-2023-27533curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.18
MediumUBUNTU-CVE-2022-27775curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.10
MediumUBUNTU-CVE-2021-3326glibc@2.31-0ubuntu9.22.31-0ubuntu9.7
MediumUBUNTU-CVE-2017-11164pcre3@2:8.39-12build1no fix listed
MediumGHSA-7286-pgfv-vxvhzookeeper@3.5.73.7.2
MediumGHSA-3j6g-hxx5-3q26kafka-clients@2.4.12.6.3
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.41.11.0
MediumUBUNTU-CVE-2019-18276bash@5.0-6ubuntu1.15.0-6ubuntu1.2
MediumUBUNTU-CVE-2022-27782curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.11
MediumUBUNTU-CVE-2024-4741openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.23
MediumUBUNTU-CVE-2022-28321pam@1.3.1-5ubuntu4.31.3.1-5ubuntu4.4
MediumUBUNTU-CVE-2022-27405freetype@2.10.1-2ubuntu0.12.10.1-2ubuntu0.2
MediumUBUNTU-CVE-2022-40674expat@2.2.9-1build12.2.9-1ubuntu0.5
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.38.01.79.3
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.12.22.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.12.22.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.17.33.25.5
MediumUBUNTU-CVE-2019-20838pcre3@2:8.39-12build12:8.39-12ubuntu0.1
MediumUBUNTU-CVE-2020-35527sqlite3@3.31.1-4ubuntu0.23.31.1-4ubuntu0.4
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.281.31
MediumUBUNTU-CVE-2022-27781curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.11
MediumUBUNTU-CVE-2022-22576curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.10
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.62.7
MediumGHSA-v62j-cxhh-fq22graphql-java@8.017.4
MediumUBUNTU-CVE-2026-19931curl@7.68.0-1ubuntu2.7no fix listed
MediumUBUNTU-CVE-2022-27776curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.10
MediumGHSA-v7wg-cpwc-24m4postgresql@42.2.1842.2.25
MediumUBUNTU-CVE-2022-43680expat@2.2.9-1build12.2.9-1ubuntu0.6
MediumUBUNTU-CVE-2021-33560libgcrypt20@1.8.5-5ubuntu1.11.8.5-5ubuntu1.fips.1.1
MediumUBUNTU-CVE-2023-3446openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.20
MediumUBUNTU-CVE-2016-20013glibc@2.31-0ubuntu9.2no fix listed
MediumUBUNTU-CVE-2023-31486perl@5.30.0-9ubuntu0.2no fix listed
MediumUBUNTU-CVE-2022-25313expat@2.2.9-1build12.2.9-1ubuntu0.4
MediumUBUNTU-CVE-2018-5709krb5@1.17-6ubuntu4.1no fix listed
MediumUBUNTU-CVE-2024-28757expat@2.2.9-1build1no fix listed
MediumGHSA-xrjj-mj9h-534mgolang.org/x/net@v0.0.0-20210224082022-3d97a244fca70.4.0
MediumUBUNTU-CVE-2016-10228glibc@2.31-0ubuntu9.22.31-0ubuntu9.7

Used by

1 chart
ChartVersionTagContainers
skywalking-v1huangchengwu-helm-chart0.1.08.9.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.