apachepulsar/pulsar:2.6.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apachepulsar/pulsar
apachepulsar/pulsar:2.6.1 resolved to 4db6ff0b4045, scanned 14 Sept 2026: 356 findings, 9 critical, 6 on KEV; deployed by 1 chart, among them pulsar.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
141 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 4db6ff0b4045 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-mmxm-8w33-wc4h | http2-common | 9.4.58 |
| Medium | GHSA-q2q7-5pp4-w6pg | urllib3 | 1.26.5 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | GHSA-c2x9-vw5h-39vc | pulsar-functions-worker | 2.10.6 |
| Medium | GHSA-7286-pgfv-vxvh | zookeeper | 3.7.2 |
| Medium | GHSA-668q-qrv7-99fm | logback-core | 1.2.9 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | GHSA-9w8r-397f-prfh | pygments | 2.7.4 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | DLA-3103-1 | zlib | 1:1.2.11.dfsg-1+deb10u2 |
| Medium | GHSA-gwrp-pvrq-jmwv | commons-io | 2.7 |
| Medium | GHSA-qwmp-2cf2-g9g6 | wheel | 0.38.1 |
| Medium | DSA-4697-1 | gnutls28 | 3.6.7-4+deb10u4 |
| Medium | GHSA-r9hx-vwmv-q579 | setuptools | 65.5.1 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | GHSA-wgmr-mf83-7x4j | http2-server | 9.4.47 |
| Medium | GHSA-f256-j965-7f32 | netty | no fix listed |
| Medium | GHSA-f256-j965-7f32 | netty-codec-http2 | 4.1.61.Final |
| Medium | GHSA-c35h-w8hj-mm55 | pulsar-proxy | 2.10.6 |
| Medium | GHSA-86wm-rrjm-8wh8 | jetty-server | 9.4.35.v20201120 |
| Medium | GHSA-xc67-hjx6-cgg6 | jetty-server | 9.4.17.v20190418 |
| Medium | GHSA-rvgg-f8qm-6h7j | vertx-web | 3.5.3 |
| Medium | GHSA-vp98-w2p3-mv35 | log4j | 2.0 |
| Medium | GHSA-rhrv-645h-fjfh | avro | 1.11.3 |
| Medium | DLA-3559-1 | libssh2 | 1.8.0-2.1+deb10u1 |
| Medium | DLA-3477-1 | python3.7 | 3.7.3-2+deb10u5 |
| Medium | GHSA-w9fj-cfpg-grvv | netty-codec-http2 | 4.1.132.Final |
| Medium | GHSA-wx5j-54mm-rqqq | netty | no fix listed |
| Medium | GHSA-wx5j-54mm-rqqq | netty-codec-http | 4.1.71.Final |
| Medium | GHSA-45xm-v8gq-7jqx | vertx-core | 3.5.4 |
| Medium | GHSA-wrvw-hg22-4m67 | protobuf-java | 3.16.1 |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | DSA-4920-1 | libx11 | 2:1.6.7-1+deb10u2 |
| Medium | DSA-4994-1 | bind9 | 1:9.11.5.P4+dfsg-5.1+deb10u6 |
| Medium | GHSA-6mjq-h674-j845 | netty-handler | 4.1.94.Final |
| Medium | GHSA-j8r2-6x86-q33q | requests | 2.31.0 |
| Medium | DSA-4944-1 | krb5 | 1.17-3+deb10u2 |
| Medium | GHSA-pvp8-3xj6-8c6x | commons-configuration | no fix listed |
| Medium | PYSEC-2023-192 | urllib3 | 2.0.6 |
| Medium | DSA-4881-1 | curl | 7.64.0-4+deb10u2 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-rggv-cv7r-mw98 | http2-common | 9.4.54 |
| Medium | GHSA-r28m-g6j9-r2h5 | jetty-server | 9.4.17.v20190418 |
| Medium | PYSEC-2024-60 | idna | 3.7 |
| Medium | GHSA-83q5-whqp-r8jr | pulsar-websocket | 2.10.5 |