apache/skywalking-ui:6.5.0 container image
Docker HubScanned 29 Sept 2026
Deployed by 1 of 17,939 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/skywalking-ui
apache/skywalking-ui:6.5.0 resolved to a84f9d9b8067, scanned 29 Sept 2026: 256 findings, 10 critical, 6 on KEV; deployed by 1 chart, among them skywalking.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
256 distinct on this digest
Findings for digest a84f9d9b8067 as scanned on 29 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 29 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | ALPINE-CVE-2019-19242 | sqlite | 3.25.3-r3 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | GHSA-gcx9-497g-6cp6 | tomcat-embed-core | no fix listed |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | no fix listed |
| Medium | GHSA-wxqc-pxw9-g2p8 | spring-expression | 5.2.24.RELEASE |
| Medium | ALPINE-CVE-2019-5094 | e2fsprogs | 1.44.2-r1 |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.1.133.Final |
| Medium | GHSA-w37g-rhq8-7m4j | snakeyaml | 1.32 |
| Medium | GHSA-5mcr-gq6c-3hq2 | netty-codec-http | 4.1.59.Final |
| Medium | GHSA-hh3j-x4mc-g48r | tomcat-embed-core | 8.5.49 |
| Medium | GHSA-c8xf-m4ff-jcxj | bcprov-jdk15on | 1.56 |
| Medium | GHSA-xf96-w227-r7c4 | spring-boot-autoconfigure | 2.5.15 |
| Medium | GHSA-gx5v-xp9w-j4cg | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-rmrm-75hp-phr2 | hibernate-validator | 6.0.20.Final |
| Medium | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | ALPINE-CVE-2018-1000654 | libtasn1 | 4.14-r0 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-g8pj-r55q-5c2v | tomcat-embed-core | 8.5.94 |
| Low | ALPINE-CVE-2019-5188 | e2fsprogs | 1.44.2-r2 |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | GHSA-7v6m-28jr-rg84 | hibernate-validator | 6.2.0.CR1 |
| Low | ALPINE-CVE-2018-16435 | lcms2 | 2.9-r1 |
| Low | GHSA-563x-q5rq-57qp | tomcat-embed-core | 9.0.116 |
| Low | GHSA-cm59-pr5q-cw85 | spring-boot | 2.2.11.RELEASE |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-564r-hj7v-mcr5 | spring-expression | 5.2.23.RELEASE |
| Low | GHSA-fv25-8xcx-gqjc | tomcat-embed-core | 9.0.118 |
| Low | GHSA-mg83-c7gq-rv5c | spring-security-crypto | 5.7.16 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 9.0.118 |
| Low | ALPINE-CVE-2018-20217 | krb5 | 1.15.4-r0 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | GHSA-5jpm-x58v-624v | netty-codec-http | 4.1.108.Final |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-6xx3-rg99-gc3p | bcprov-jdk15on | 1.66 |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | GHSA-mgvc-8q2h-5pgc | spring-boot-starter-actuator | no fix listed |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-775g-4xr8-78h8 | spring-expression | no fix listed |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | no fix listed |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | no fix listed |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | no fix listed |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk15on | 1.78 |
| Low | GHSA-jjfh-589g-3hjx | spring-boot-actuator | 2.7.18 |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | no fix listed |
| Low | GHSA-269q-hmxg-m83q | netty-codec-http | 4.1.77.Final |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| skywalkingkubesphere-carryon-experimental | 0.6.0 | 6.5.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.