apachepulsar/pulsar:2.9.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of apachepulsar/pulsar
apachepulsar/pulsar:2.9.0 resolved to d056c89b7131, scanned 14 Sept 2026: 1,137 findings, 16 critical, 6 on KEV; deployed by 1 chart, among them chirpstack.
Radar Score
1,137 findings on digest d056c89b7131 · scanned 14 Sept 2026
KEV ×6 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest d056c89b7131 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-jcwr-x25h-x5fh | plexus-utils | 3.0.24 |
| Low | UBUNTU-CVE-2023-38471 | avahi | 0.7-4ubuntu7.3 |
| Low | UBUNTU-CVE-2022-38533 | binutils | 2.34-6ubuntu1.4 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | no fix listed |
| Low | UBUNTU-CVE-2026-75466 | libjpeg-turbo | no fix listed |
| Low | UBUNTU-CVE-2024-11053 | curl | 7.68.0-1ubuntu2.25 |
| Low | UBUNTU-CVE-2025-5372 | libssh | no fix listed |
| Low | UBUNTU-CVE-2023-38469 | avahi | 0.7-4ubuntu7.3 |
| Low | UBUNTU-CVE-2023-38470 | avahi | 0.7-4ubuntu7.3 |
| Low | UBUNTU-CVE-2023-38472 | avahi | 0.7-4ubuntu7.3 |
| Low | UBUNTU-CVE-2023-38473 | avahi | 0.7-4ubuntu7.3 |
| Low | UBUNTU-CVE-2024-21144 | openjdk-lts | 11.0.24+8-1ubuntu3~20.04 |
| Low | UBUNTU-CVE-2023-21968 | openjdk-lts | 11.0.19+7~us1-0ubuntu1~20.04.1 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-21131 | openjdk-lts | 11.0.24+8-1ubuntu3~20.04 |
| Low | UBUNTU-CVE-2025-66866 | binutils | no fix listed |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.4.48-5ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-1489 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-6019 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm7 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | UBUNTU-CVE-2024-21208 | openjdk-lts | 11.0.25+9-1ubuntu1~20.04 |
| Low | UBUNTU-CVE-2026-0964 | libssh | 0.9.3-2ubuntu2.5+esm3 |
| Low | UBUNTU-CVE-2026-59848 | libssh | no fix listed |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 |
| Low | UBUNTU-CVE-2023-6004 | libssh | 0.9.3-2ubuntu2.5 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-qccp-gfcp-xxvc | urllib3 | 2.7.0 |
| Low | GHSA-qh8g-58pp-2wxh | jetty-http | 12.0.12 |
| Low | UBUNTU-CVE-2021-33294 | elfutils | 0.176-1.1ubuntu0.1 |
| Low | UBUNTU-CVE-2020-35538 | libjpeg-turbo | 2.0.3-0ubuntu1.20.04.3 |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | GHSA-7p3p-8qv8-m2vh | jetty-server | no fix listed |
| Low | UBUNTU-CVE-2024-21012 | openjdk-lts | 11.0.23+9-1ubuntu1~20.04.2 |
| Low | UBUNTU-CVE-2026-22695 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-22021 | openjdk-lts | 11.0.31+11-1ubuntu1~20.04.2 |
| Low | UBUNTU-CVE-2026-47021 | openjdk-lts | 11.0.32+9-1ubuntu1~20.04 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| chirpstackmosquitto-helm-chart | 0.5.0 | 2.9.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.