StackRadar

apsl/thumbor:6.7.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apsl/thumbor

apsl/thumbor:6.7.0 resolved to 51e2de5c2c70, scanned 14 Sept 2026: 138 findings, 2 critical, 2 on KEV; deployed by 1 chart, among them data-fair.

Radar Score

2,190205383

138 findings on digest 51e2de5c2c70 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
6.7.0resolves to51e2de5c2c701 chart8 days ago2053832,190

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

138 distinct on this digest

Findings for digest 51e2de5c2c70 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-fj7v-r99m-22gqpillow@5.4.112.3.0
LowGHSA-fqwm-6jpj-5wxctornado@5.1.16.5.5
LowDSA-4685-1apt@1.4.91.4.10
LowPYSEC-2026-3721pip@19.3.126.2
LowGHSA-mq26-g339-26xfpip@19.3.123.3
LowGHSA-cpwx-vrp4-4pq7jinja2@2.10.33.1.6
LowGHSA-m87m-mmvp-v9qmpymongo@3.10.04.6.3
LowGHSA-pq67-6m6q-mj2vurllib3@1.25.72.5.0
LowDLA-2290-1e2fsprogs@1.43.4-2+deb9u11.43.4-2+deb9u2
LowPYSEC-2025-265tornado@5.1.16.5.3
LowGHSA-qccp-gfcp-xxvcurllib3@1.25.72.7.0
LowGHSA-jgpv-4h4c-xhw3pillow@5.4.18.1.2
LowGHSA-g4mx-q9vg-27p4urllib3@1.25.71.26.18
LowDLA-2830-1tar@1.29b-1.11.29b-1.1+deb9u1
LowGHSA-8423-8fgw-73vqtornado@5.1.16.5.8
LowDLA-3063-1systemd@232-25+deb9u12232-25+deb9u14
LowGHSA-w235-7p84-xx57tornado@5.1.16.4.1
LowDLA-2487-1apt@1.4.91.4.11
LowGHSA-r73j-pqj5-w3x7pillow@5.4.112.2.0
LowGHSA-jp4c-xjxw-mgf9pip@19.3.126.1
LowGHSA-pw6j-qg29-8w7ftornado@5.1.16.5.7
LowGHSA-wjx4-4jcj-g98jpillow@5.4.112.2.0
LowGHSA-cx3h-4qpv-8hc9tornado@5.1.16.5.6
LowGHSA-qppv-j76h-2rpxtornado@5.1.16.3.3
LowGHSA-4x4j-2g7c-83w6pillow@5.4.112.3.0
LowGHSA-753j-mpmx-qq6gtornado@5.1.16.4.1
LowGHSA-58qw-9mgm-455vpip@19.3.126.1
LowDLA-2424-1tzdata@2019c-0+deb9u12020d-0+deb9u1
LowDLA-2509-1tzdata@2019c-0+deb9u12020e-0+deb9u1
LowDLA-2542-1tzdata@2019c-0+deb9u12021a-0+deb9u1
LowDLA-2593-1ca-certificates@20161130+nmu1+deb9u120200601~deb9u2
LowDLA-2797-1tzdata@2019c-0+deb9u12021a-0+deb9u2
LowDLA-2948-1debian-archive-keyring@2017.5+deb9u12017.5+deb9u2
LowDLA-2963-1tzdata@2019c-0+deb9u12021a-0+deb9u3
LowDLA-3051-1tzdata@2019c-0+deb9u12021a-0+deb9u4
LowPYSEC-2023-175pillow@5.4.110.0.1
LowGHSA-6vgw-5pg2-w6jppip@19.3.126.0
LowGHSA-4fx9-vc88-q2xcpillow@5.4.19.0.0

Used by

1 chart
ChartVersionTagContainers
data-fairdata354-helmVerified publisher1.1.26.7.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.