apachepulsar/pulsar:2.6.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apachepulsar/pulsar
apachepulsar/pulsar:2.6.1 resolved to 4db6ff0b4045, scanned 14 Sept 2026: 356 findings, 9 critical, 6 on KEV; deployed by 1 chart, among them pulsar.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
356 distinct on this digest
Findings for digest 4db6ff0b4045 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-jfh8-c2jp-5v3qKEV | log4j-core | 2.12.2 |
| Critical | GHSA-7rjr-3q55-vv33KEV | log4j-core | 2.12.2 |
| Critical | GHSA-2qrg-x229-3v8q | log4j | no fix listed |
| Critical | GHSA-p6xc-xr62-6r2g | log4j-core | 2.12.3 |
| Critical | GHSA-65fg-84f6-3jq3 | log4j | no fix listed |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-jg2g-4rjg-cmqh | pulsar-functions-worker | 2.10.6 |
| Critical | GHSA-f7vh-qwp3-x37m | log4j | no fix listed |
| Critical | GHSA-w9p3-5cr8-m3jj | log4j | no fix listed |
| High | GHSA-fp5r-v3w9-4333 | log4j | no fix listed |
| High | GHSA-8489-44mv-ggj8 | log4j-core | 2.12.4 |
| High | GHSA-26vr-8j45-3r4w | jetty-server | 9.4.39 |
| High | GHSA-qppj-fm5r-hxr3KEV | http2-server | 9.4.53 |
| High | GHSA-qppj-fm5r-hxr3KEV | http2-common | 9.4.53 |
| High | GHSA-gwcr-j4wh-j3cq | jetty-servlets | 9.4.41 |
| High | GHSA-m394-8rww-3jr7 | jetty-server | 9.4.37 |
| High | GHSA-x3rh-m7vp-35f2 | jetty-server | 9.4.30.v20200611 |
| High | GHSA-cqqj-4p63-rrmm | netty | no fix listed |
| High | GHSA-2f88-5hg8-9x2x | maven-compat | 3.8.1 |
| High | GHSA-2f88-5hg8-9x2x | maven-core | 3.8.1 |
| High | DLA-3621-1KEV | nghttp2 | 1.36.0-2+deb10u2 |
| High | DSA-4777-1KEV | freetype | 2.9.1-3+deb10u2 |
| Medium | DLA-3816-1 | bind9 | 1:9.11.5.P4+dfsg-5.1+deb10u11 |
| Medium | GHSA-8vhq-qq4p-grq3 | plexus-utils | 3.0.16 |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb10u3 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | GHSA-8q59-q68h-6hv4 | pyyaml | 5.4 |
| Medium | DSA-4963-1 | openssl | 1.1.1d-0+deb10u7 |
| Medium | GHSA-4jrv-ppp4-jm57 | gson | 2.8.9 |
| Medium | GHSA-mc84-pj99-q6hh | commons-compress | 1.21 |
| Medium | DLA-3804-1 | nghttp2 | 1.36.0-2+deb10u3 |
| Medium | DSA-4845-1 | openldap | 2.4.47+dfsg-3+deb10u5 |
| Medium | GHSA-rprw-h62v-c2w7 | pyyaml | 5.1 |
| Medium | DSA-5139-1 | openssl | 1.1.1n-0+deb10u2 |
| Medium | DSA-4909-1 | bind9 | 1:9.11.5.P4+dfsg-5.1+deb10u5 |
| Medium | GHSA-crv7-7245-f45f | commons-compress | 1.21 |
| Medium | GHSA-7hfm-57qf-j43q | commons-compress | 1.21 |
| Medium | DLA-3449-1 | openssl | 1.1.1n-0+deb10u5 |
| Medium | DSA-5103-1 | openssl | 1.1.1d-0+deb10u8 |
| Medium | GHSA-xqfj-vm6h-2x34 | commons-compress | 1.21 |
| Medium | DSA-5140-1 | openldap | 2.4.47+dfsg-3+deb10u7 |
| Medium | DSA-4857-1 | bind9 | 1:9.11.5.P4+dfsg-5.1+deb10u3 |
| Medium | DSA-4860-1 | openldap | 2.4.47+dfsg-3+deb10u6 |
| Medium | DSA-4875-1 | openssl | 1.1.1d-0+deb10u6 |
| Medium | GHSA-wm47-8v5p-wjpj | netty-codec-http2 | 4.1.60.Final |
| Medium | GHSA-wm47-8v5p-wjpj | netty | no fix listed |
| Medium | DLA-3325-1 | openssl | 1.1.1n-0+deb10u4 |
| Medium | GHSA-xp2r-g8qq-44hh | pulsar-functions-worker | 2.10.6 |
| Medium | GHSA-p979-4mfw-53vg | netty | no fix listed |
| Medium | DSA-4661-1 | openssl | 1.1.1d-0+deb10u3 |