StackRadar

bitnamilegacy/kafka:3.5.0-debian-11-r0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/kafka

bitnamilegacy/kafka:3.5.0-debian-11-r0 resolved to 8657bb93a581, scanned 14 Sept 2026: 244 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them thingsboard-cluster.

Radar Score

2,7460533206

244 findings on digest 8657bb93a581 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
3.5.0-debian-11-r0resolves to8657bb93a5811 chart8 days ago05332062,746

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

206 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 8657bb93a581 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDLA-4321-1openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u4
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowBIT-java-2026-61308java@17.0.7-7-21.8.0
LowBIT-java-2024-21145java@17.0.7-7-21.8.0
LowBIT-kafka-2026-33558Apache Kafka@3.5.03.9.2
LowBIT-kafka-2026-33558kafka@3.5.0-03.9.2
LowGHSA-wf66-mphr-4c4rkafka-clients@3.5.03.9.2
LowGO-2023-1878stdlib@go1.20.51.19.11
LowGO-2024-2963stdlib@go1.20.51.21.12
LowDLA-4432-1curl@7.74.0-1.3+deb11u77.74.0-1.3+deb11u16
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowDSA-5678-1glibc@2.31-13+deb11u62.31-13+deb11u10
LowDLA-4267-1gnutls28@3.7.1-5+deb11u33.7.1-5+deb11u8
LowDLA-4063-1gnutls28@3.7.1-5+deb11u33.7.1-5+deb11u7
LowGO-2023-2375stdlib@go1.19.91.20.0
LowBIT-java-2026-60147java@17.0.7-7-21.8.0
LowGO-2023-2382stdlib@go1.20.51.20.12
LowGO-2024-2599stdlib@go1.20.51.21.8
LowBIT-java-2023-22049java@17.0.7-7-21.8.0
LowGO-2024-3106stdlib@go1.20.51.22.7
LowBIT-kafka-2024-27309Apache Kafka@3.5.03.5.2
LowDLA-4061-1libtasn1-6@4.16.0-2+deb11u14.16.0-2+deb11u2
LowBIT-java-2024-21011java@17.0.7-7-21.8.0
LowBIT-java-2023-22044java@17.0.7-7-217.0.8
LowGO-2024-2600stdlib@go1.20.51.21.8
LowGHSA-xq3w-v528-46rvnetty-common@4.1.92.Final4.1.115.Final
LowGO-2024-2609stdlib@go1.20.51.21.8
LowGO-2024-3107stdlib@go1.20.51.22.7
LowBIT-java-2023-22045java@17.0.7-7-21.8.0
LowBIT-java-2023-22041java@17.0.7-7-21.8.0
LowGHSA-r7wm-3cxj-wff9jackson-core@2.13.52.18.8
LowBIT-java-2024-21068java@17.0.7-7-21.8.0
LowGHSA-389x-839f-4rhxnetty-common@4.1.92.Final4.1.118.Final
LowBIT-java-2023-22036java@17.0.7-7-211.0.20
LowBIT-java-2024-21138java@17.0.7-7-21.8.0
LowBIT-java-2026-21933java@17.0.7-7-21.8.0
LowBIT-java-2023-21937java@17.0.7-7-21.8.0
LowBIT-java-2023-21938java@17.0.7-7-21.8.0
LowGO-2023-2041stdlib@go1.20.51.20.8
LowBIT-java-2026-46968java@17.0.7-7-21.8.0
LowGO-2023-2043stdlib@go1.20.51.20.8
LowBIT-java-2024-21217java@17.0.7-7-21.8.0
LowGO-2023-2186stdlib@go1.20.51.20.11
LowDLA-4490-1openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u5
LowGHSA-hgj6-7826-r7m5jackson-databind@2.13.52.18.8
LowGO-2024-3105stdlib@go1.20.51.22.7
LowBIT-java-2026-62574java@17.0.7-7-21.8.0
LowBIT-java-2023-21968java@17.0.7-7-21.8.0
LowBIT-java-2024-21131java@17.0.7-7-21.8.0
LowGO-2026-4981stdlib@go1.20.51.25.10

Used by

1 chart
ChartVersionTagContainers
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263.5.0-debian-11-r01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.