StackRadar

aquasec/trivy:0.72.0 container image

Docker Hub

Scanned 8 Sept 2026

Deployed by 0 of 18,178 indexed charts (latest versions) at this tag.Docker Hub all tags of aquasec/trivy

aquasec/trivy:0.72.0 resolved to cffe3f5161a4, scanned 8 Sept 2026: 84 findings, 0 critical, 1 on KEV; deployed by 0 charts.

Radar Score

815011172

84 findings on digest cffe3f5161a4 · scanned 8 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.72.0resolves tocffe3f5161a4—1 month ago011172815

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

11 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest cffe3f5161a4 as scanned on 8 Sept 2026 for linux/amd64, advisories as of 8 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumALPINE-CVE-2026-9079curl@8.20.0-r18.21.0-r0
MediumALPINE-CVE-2026-63073openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-10536curl@8.20.0-r18.21.0-r0
MediumALPINE-CVE-2026-11856curl@8.20.0-r18.21.0-r0
MediumALPINE-CVE-2026-8925curl@8.20.0-r18.21.0-r0
MediumALPINE-CVE-2026-18798openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-63076openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-8924curl@8.20.0-r18.21.0-r0
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-66046expat@2.8.2-r02.8.4-r0
MediumALPINE-CVE-2026-8927curl@8.20.0-r18.21.0-r0

Used by

0 charts

No indexed chart deploys this repository in its latest version.

Also in older indexed versions (2)

Not counted above: the chart’s latest version no longer references it, or the chart is no longer in the index.

ChartVersionTagContainers
trivysecurecodeboxnot in the index5.8.00.72.01
trivysecurecodebox-trivy5.8.00.72.0unmeasured: HTTP 429 resolving manifest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 8 Sept 2026 · advisories as of 8 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.