apache/tika:3.3.1.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/tika
apache/tika:3.3.1.0 resolved to 90b7fa1dc018, scanned 14 Sept 2026: 197 findings, 0 critical; deployed by 1 chart, among them paperless.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
197 distinct on this digest
Findings for digest 90b7fa1dc018 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.5.5-1ubuntu3.4 |
| Low | UBUNTU-CVE-2026-6238 | glibc | 2.43-2ubuntu2.3 |
| Low | UBUNTU-CVE-2026-61308 | openjdk-21 | no fix listed |
| Low | GHSA-rcqc-6cw3-h962 | jackson-databind | 2.21.4 |
| Low | UBUNTU-CVE-2026-34181 | openssl | 3.5.5-1ubuntu3.2 |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 2.21.5 |
| Low | UBUNTU-CVE-2026-5435 | glibc | 2.43-2ubuntu2.3 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.21.4 |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-11822 | sqlite3 | 3.46.1-9ubuntu0.1 |
| Low | UBUNTU-CVE-2026-11824 | sqlite3 | 3.46.1-9ubuntu0.1 |
| Low | UBUNTU-CVE-2026-60147 | openjdk-21 | 21.0.12+8-1~26.04 |
| Low | GHSA-9fxm-vc8v-hj55 | jackson-databind | 2.21.4 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.21.4 |
| Low | UBUNTU-CVE-2026-54411 | pam | 1.7.0-5ubuntu3.1 |
| Low | UBUNTU-CVE-2026-35368 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-19487 | perl | 5.40.1-7ubuntu0.2 |
| Low | UBUNTU-CVE-2026-46968 | openjdk-21 | 21.0.12+8-1~26.04 |
| Low | UBUNTU-CVE-2026-42769 | openssl | 3.5.5-1ubuntu3.2 |
| Low | UBUNTU-CVE-2026-35341 | rust-coreutils | no fix listed |
| Low | GHSA-5hh8-q8hv-fr38 | jackson-databind | 2.21.4 |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.21.4 |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | 1.12.0-2ubuntu0.1 |
| Low | UBUNTU-CVE-2026-75466 | libjpeg-turbo | no fix listed |
| Low | UBUNTU-CVE-2026-13595 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.5.2-4ubuntu0.1 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.21.5 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-35352 | rust-coreutils | no fix listed |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.35+dfsg-4ubuntu0.4 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GHSA-qh8g-58pp-2wxh | jetty-http | 12.0.12 |
| Low | GHSA-7p3p-8qv8-m2vh | jetty-server | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-22021 | openjdk-21 | 21.0.11+10-1~26.04.2 |
| Low | UBUNTU-CVE-2026-47021 | openjdk-21 | 21.0.12+8-1~26.04 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2026-46917 | openjdk-21 | 21.0.12+8-1~26.04 |
| Low | UBUNTU-CVE-2026-47027 | openjdk-21 | 21.0.12+8-1~26.04 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-22013 | openjdk-21 | 21.0.11+10-1~26.04.2 |