atlassian/jira-software:8.14.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of atlassian/jira-software
atlassian/jira-software:8.14.0 resolved to 37bc46cbec1a, scanned 14 Sept 2026: 658 findings, 18 critical, 4 on KEV; deployed by 1 chart, among them atlassian-jira.
Radar Score
658 findings on digest 37bc46cbec1a · scanned 14 Sept 2026
KEV ×4 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 37bc46cbec1a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-84q7-p226-4x5w | jetty-server | 9.3.24.v20180605 |
| Medium | GHSA-89qr-369f-5m5x | jackson-databind | 2.6.7.5 |
| Medium | GHSA-cvm9-fjm9-3572 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-vfqx-33qm-g869 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-9m6f-7xcq-8vf8 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-w9jg-gvgr-354m | spring-security-core | 5.2.11 |
| Medium | GHSA-58pp-9c76-5625 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-8jrj-525p-826v | xstream | 1.4.18 |
| Medium | GHSA-rf6r-2c4q-2vwg | jackson-databind | 2.9.10.4 |
| Medium | GHSA-wfcc-pff6-rgc5 | jetty-server | 9.2.22.v20170606 |
| Medium | GHSA-v3xw-c963-f5hc | jackson-databind | 2.9.10.4 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.2-0ubuntu1.25 |
| Medium | GHSA-758m-v56v-grj4 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-mc6h-4qgp-37qh | jackson-databind | 2.9.10.5 |
| Medium | GHSA-g5mm-vmx4-3rg7 | spring-context | 5.2.21.RELEASE |
| Medium | GHSA-cf6r-3wgc-h863 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-c2q3-4qrh-fm48 | jackson-databind | 2.9.10.5 |
| Medium | GHSA-4g42-gqrg-4633 | struts-core | no fix listed |
| Medium | GHSA-43gc-mjxg-gvrq | xstream | 1.4.16 |
| Medium | GHSA-cmfg-87vq-g5g4 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-7vx9-xjhr-rw6h | jetty-server | 9.2.27.v20190403 |
| Medium | GHSA-f4qf-m5gf-8jm8 | tomcat-coyote | 8.5.64 |
| Medium | GHSA-cxfm-5m4g-x7xp | xstream | 1.4.18 |
| Medium | GHSA-ccgv-vj62-xf9h | spring-web | no fix listed |
| Medium | GHSA-95cm-88f5-f2c7 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-56p8-3fh9-4cvq | xstream | 1.4.16 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-27xj-rqx5-2255 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-wm9w-rjj3-j356 | tomcat-coyote | no fix listed |
| Medium | GHSA-88cc-g835-76rp | postgresql | 42.2.13 |
| Medium | GHSA-rpr3-cw39-3pxh | jackson-databind | 2.9.10.4 |
| Medium | GHSA-qmqc-x3r4-6v39 | jackson-databind | 2.9.10 |
| Medium | UBUNTU-CVE-2021-46848 | libtasn1-6 | 4.18.0-4ubuntu0.2 |
| Medium | GHSA-6wf9-jmg9-vxcc | xstream | 1.4.18 |
| Medium | UBUNTU-CVE-2024-45490 | expat | 2.4.7-1ubuntu0.4 |
| Medium | GHSA-3832-9276-x7gf | commons-httpclient | no fix listed |
| Medium | GHSA-xqj7-j8j5-f2xr | bcprov-jdk15on | 1.60 |
| Medium | GHSA-r29c-68gh-xp6x | tomcat-coyote | 9.0.118 |
| Medium | UBUNTU-CVE-2024-37371 | krb5 | 1.19.2-2ubuntu0.4 |
| Medium | GHSA-98qh-xjc8-98pq | postgresql | 42.7.11 |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | GHSA-rrvx-pwf8-p59p | bcprov-jdk15on | 1.56 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | UBUNTU-CVE-2024-6345 | setuptools | 59.6.0-1.2ubuntu0.22.04.2 |
| Medium | GHSA-fh63-4r66-jc7v | velocity-tools | no fix listed |
| Medium | UBUNTU-CVE-2017-11164 | pcre3 | no fix listed |
| Medium | GHSA-xmc8-26q4-qjhx | jackson-dataformat-cbor | 2.11.4 |
| Medium | GHSA-wxr5-93ph-8wr9 | commons-beanutils | 1.11.0 |
| Medium | UBUNTU-CVE-2024-4741 | openssl | 3.0.2-0ubuntu1.17 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| atlassian-jirasomeblackmagic | 3.3.2 | 8.14.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.