bitnamilegacy/elasticsearch:9.1.2-debian-12-r0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/elasticsearch

bitnamilegacy/elasticsearch:9.1.2-debian-12-r0 resolved to 00176a47afa0, scanned 14 Sept 2026: 427 findings, 3 critical; deployed by 2 charts, among them thehive and dave.

Radar Score

4,6813162361

427 findings on digest 00176a47afa0 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
9.1.2-debian-12-r0resolves to	00176a47afa0	2 charts	6 days ago	3162361	4,681

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

361 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 00176a47afa0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.118.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk18on@1.78.1	1.79
Low	DEBIAN-CVE-2026-42767	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-5545	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-48962	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-3784	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.118.Final	4.1.136.Final
Low	DEBIAN-CVE-2025-14819	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-42015	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed
Low	BIT-java-2026-47063	java@21.0.8-12-0	1.8.0
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.118.Final	4.1.136.Final
Low	DEBIAN-CVE-2025-40909	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.19.0	2.25.4
Low	BIT-java-2025-53057	java@21.0.8-12-0	1.8.0
Low	DEBIAN-CVE-2026-48961	perl@5.36.0-7+deb12u2	no fix listed
Low	GHSA-72hv-8253-57qq	jackson-core@2.17.2	2.18.6
Low	BIT-elasticsearch-2026-72686	elasticsearch@9.1.2-0	8.19.20
Low	DEBIAN-CVE-2026-63074	openssl@3.0.17-1~deb12u2	no fix listed
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.118.Final	4.1.133.Final
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2025-14831	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u10	no fix listed
Low	BIT-java-2026-61308	java@21.0.8-12-0	1.8.0
Low	DEBIAN-CVE-2025-65018	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.118.Final	4.1.135.Final
Low	BIT-elasticsearch-2026-56145	elasticsearch@9.1.2-0	8.19.18
Low	BIT-elasticsearch-2026-72679	elasticsearch@9.1.2-0	8.19.20
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.42.0	0.55.0
Low	BIT-elasticsearch-2025-68384	elasticsearch@9.1.2-0	8.19.9
Low	GHSA-qf7c-7r9h-mm92	x-pack-security@9.1.2	9.1.9
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u2	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.118.Final	4.1.129.Final
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.15.0	2.18.8
Low	BIT-elasticsearch-2026-72636	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72638	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72645	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72647	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72684	elasticsearch@9.1.2-0	8.19.21
Low	BIT-elasticsearch-2026-72687	elasticsearch@9.1.2-0	8.19.20
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.45	1.2.8
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.118.Final	4.1.135.Final
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u12	no fix listed
Low	BIT-java-2026-60147	java@21.0.8-12-0	1.8.0
Low	BIT-elasticsearch-2025-37731	elasticsearch@9.1.2-0	8.19.8
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u12	no fix listed

Used by

2 charts

Chart	Version	Tag	Containers
thehivestrangebee-helmOfficialVerified publisher	1.0.6, 1.0.5	9.1.2-debian-12-r0	4
daveit-at-mOfficialVerified publisher	0.2.15	9.1.2-debian-12-r0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.