StackRadar

aquasec/trivy:0.72.0 container image

Docker Hub

Scanned 8 Sept 2026

Deployed by 0 of 18,178 indexed charts (latest versions) at this tag.Docker Hub all tags of aquasec/trivy

aquasec/trivy:0.72.0 resolved to cffe3f5161a4, scanned 8 Sept 2026: 84 findings, 0 critical, 1 on KEV; deployed by 0 charts.

Radar Score

815011172

84 findings on digest cffe3f5161a4 · scanned 8 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.72.0resolves tocffe3f5161a4—1 month ago011172815

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

72 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest cffe3f5161a4 as scanned on 8 Sept 2026 for linux/amd64, advisories as of 8 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-8926curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-14456openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-11352curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-11564curl@8.20.0-r18.21.0-r0
LowGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.81.01.83.1
LowALPINE-CVE-2026-63072openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-11586curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-76641expat@2.8.2-r02.8.4-r0
LowALPINE-CVE-2026-54874openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-9546curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-63075openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-33630c-ares@1.34.6-r01.34.8-r0
LowALPINE-CVE-2026-12064curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-8932curl@8.20.0-r18.21.0-r0
LowGHSA-8xwf-rjm4-xvhvoras.land/oras-go/v2@v2.6.02.6.1
LowALPINE-CVE-2026-8286curl@8.20.0-r18.21.0-r0
LowGHSA-jxpm-75mh-9fp7oras.land/oras-go/v2@v2.6.02.6.1
LowALPINE-CVE-2026-75803openssl@3.5.7-r03.5.8-r0
LowGHSA-fxhp-mv3v-67qporas.land/oras-go/v2@v2.6.02.6.2
LowALPINE-CVE-2026-8458curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-9547curl@8.20.0-r18.21.0-r0
LowGHSA-hc8v-wwc9-vgxmgithub.com/go-git/go-git/v5@v5.19.15.19.2
LowALPINE-CVE-2026-9080curl@8.20.0-r18.21.0-r0
LowALPINE-CVE-2026-9545curl@8.20.0-r18.21.0-r0
LowGHSA-qgq7-7hm3-q39jgithub.com/go-git/go-git/v5@v5.19.15.19.2
LowALPINE-CVE-2026-63074openssl@3.5.7-r03.5.8-r0
LowGHSA-9c54-x2g4-v92jgithub.com/sigstore/timestamp-authority/v2@v2.0.62.1.0
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.81.01.82.1
LowALPINE-CVE-2026-76956expat@2.8.2-r02.8.4-r0
LowGHSA-7236-3392-c5c6github.com/moby/buildkit@v0.30.00.31.1
LowGO-2026-5026stdlib@go1.26.4-X:jsonv21.25.13
LowGO-2026-5972stdlib@go1.26.4-X:jsonv21.25.13
LowGO-2026-6088stdlib@go1.26.4-X:jsonv21.25.13
LowGO-2026-6089stdlib@go1.26.4-X:jsonv21.25.13
LowGO-2026-6090stdlib@go1.26.4-X:jsonv21.25.13
LowGO-2026-5942golang.org/x/net@v0.55.00.56.0
LowGO-2026-5942stdlib@go1.26.4-X:jsonv21.26.6
LowGO-2026-6218stdlib@go1.26.4-X:jsonv21.25.13
LowGHSA-vh4v-2xq2-g5cgoras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-5970golang.org/x/text@v0.38.00.39.0
LowGO-2026-5774github.com/go-chi/chi/v5@v5.2.55.3.0
LowGO-2026-5856stdlib@go1.26.4-X:jsonv21.25.12
LowGO-2026-6355golang.org/x/crypto@v0.53.00.56.0
LowGHSA-9vcr-p3rj-q5q6github.com/sigstore/sigstore-go@v1.1.41.2.0
LowGO-2026-5158go.opentelemetry.io/otel@v1.43.01.42.0
LowGO-2026-6303golang.org/x/crypto@v0.53.00.55.0
LowGO-2026-6354golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-6091stdlib@go1.26.4-X:jsonv21.25.13
LowGO-2026-6180golang.org/x/mod@v0.36.00.40.0
LowGO-2026-5694github.com/sigstore/cosign/v2@v2.6.22.6.3

Used by

0 charts

No indexed chart deploys this repository in its latest version.

Also in older indexed versions (2)

Not counted above: the chart’s latest version no longer references it, or the chart is no longer in the index.

ChartVersionTagContainers
trivysecurecodeboxnot in the index5.8.00.72.01
trivysecurecodebox-trivy5.8.00.72.0unmeasured: HTTP 429 resolving manifest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 8 Sept 2026 · advisories as of 8 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.