StackRadar

bicarus/mx-api-service:1.0.2-hf1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bicarus/mx-api-service

bicarus/mx-api-service:1.0.2-hf1 resolved to dab88659ae3b, scanned 14 Sept 2026: 322 findings, 0 critical, 3 on KEV; deployed by 1 chart, among them mx-api.

Radar Score

4,4550686230

322 findings on digest dab88659ae3b · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.0.2-hf1resolves todab88659ae3b1 chart6 days ago06862304,455

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

230 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest dab88659ae3b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-wxqq-gcq8-c443dd-trace@1.7.15.100.0
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.00.5.0
LowGHSA-rhx6-c78j-4q9wpath-to-regexp@0.1.70.1.12
LowGHSA-44fp-w29j-9vj5multer@1.4.4-lts.12.0.0
LowGHSA-v62p-rq8g-8h59pbkdf2@3.1.23.1.3
LowDLA-3614-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u6
LowGHSA-62hf-57xw-28j9axios@0.21.40.31.1
LowGHSA-h7cp-r72f-jxh6pbkdf2@3.1.23.1.3
LowGHSA-34x7-hfp2-rc4vtar@6.1.117.5.7
LowGHSA-mq66-vcfc-8246mercurial@4.8.24.9
LowGHSA-fjgf-rc76-4x9pmulter@1.4.4-lts.12.0.2
LowGHSA-g5hg-p3ph-g8qgmulter@1.4.4-lts.12.0.1
LowGHSA-3g43-6gmg-66jwaxios@0.21.40.31.1
LowGHSA-cxjh-pqwp-8mfpfollow-redirects@1.15.21.15.6
LowGHSA-ph9p-34f9-6g65tmp@0.0.330.2.6
LowGHSA-hfxv-24rg-xrqfaxios@0.21.40.32.0
LowGHSA-j5f8-grm9-p9fcaxios@0.21.40.32.0
LowDLA-3288-1curl@7.64.0-4+deb10u27.64.0-4+deb10u4
LowDLA-3651-1postgresql-11@11.16-0+deb10u111.22-0+deb10u1
LowGHSA-25hc-qcg6-38wjsocket.io@4.5.34.6.2
LowGHSA-r635-g3xr-vw7xengine.io@6.2.06.6.7
LowGHSA-685m-2w69-288qprotobufjs@6.10.27.5.6
LowGHSA-75px-5xx7-5xc7protobufjs@6.10.27.5.6
LowGHSA-rgw5-rvv9-x895brace-expansion@1.1.111.1.18
LowGHSA-49j4-86m8-q2jwmysql2@2.3.33.9.4
LowGHSA-f5x3-32g6-xq36tar@6.1.116.2.1
LowGHSA-8cf7-32gw-wr33jsonwebtoken@8.5.19.0.0
LowGHSA-j8xg-fqg3-53r7word-wrap@1.2.31.2.4
LowGHSA-4vvj-4cpr-p986webpack@5.74.05.94.0
LowGHSA-pmwg-cvhr-8vh7axios@0.21.40.31.1
LowGHSA-8gc5-j5rx-235rfast-xml-parser@4.0.114.5.5
LowGHSA-qffp-2rhf-9h96tar@6.1.117.5.10
LowDLA-3314-1libsdl2@2.0.9+dfsg1-12.0.9+dfsg1-1+deb10u1
LowGHSA-23hp-3jrh-7fpwtar@6.1.117.5.19
LowGHSA-h452-7996-h45hcookiejar@2.1.32.1.4
LowGHSA-52cp-r559-cp3mjs-yaml@3.14.13.15.0
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.04.0.6
LowGHSA-7r86-cg39-jmmjminimatch@3.1.23.1.3
LowGHSA-952p-6rrq-rcjvmicromatch@4.0.54.0.8
LowGHSA-2m8v-j782-fhvrsocket.io-parser@4.2.14.2.7
LowGHSA-8qq5-rm4j-mr97tar@6.1.117.5.3
LowDLA-3363-1pcre2@10.32-510.32-5+deb10u1
LowGHSA-776f-qx25-q3ccxml2js@0.4.230.5.0
LowDLA-3239-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u5
LowGHSA-fvcv-3m26-pcqxaxios@0.21.40.31.0
LowDLA-3682-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u5
LowGHSA-mqr2-w7wj-jjgrmysql2@2.3.33.9.3
LowDLA-3437-1libssh@0.8.7-1+deb10u10.8.7-1+deb10u2
LowGHSA-23c5-xmqv-rm74minimatch@3.1.23.1.4
LowGHSA-mh99-v99m-4gvgbrace-expansion@1.1.111.1.17

Used by

1 chart
ChartVersionTagContainers
mx-apibicarus-labs0.1.01.0.2-hf11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.