StackRadar

bitnamilegacy/os-shell:12-debian-12-r43 container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/os-shell

bitnamilegacy/os-shell:12-debian-12-r43 resolved to 9ba5d16f9c64, scanned 21 Oct 2026: 382 findings, 1 critical; deployed by 1 chart, among them arlas-aias.

Radar Score

4,1361059322

382 findings on digest 9ba5d16f9c64 · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
12-debian-12-r43resolves to9ba5d16f9c641 chartyesterday10593224,136

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

382 distinct on this digest

Findings for digest 9ba5d16f9c64 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDEBIAN-CVE-2026-8927curl@7.88.1-10+deb12u12no fix listed
MediumDEBIAN-CVE-2026-28388openssl@3.0.15-1~deb12u13.0.19-1~deb12u2
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u10no fix listed
MediumDEBIAN-CVE-2026-3833gnutls28@3.7.9-2+deb12u43.7.9-2+deb12u7
MediumDEBIAN-CVE-2026-40355krb5@1.20.1-2+deb12u21.20.1-2+deb12u5
MediumDEBIAN-CVE-2026-28387openssl@3.0.15-1~deb12u13.0.19-1~deb12u2
MediumGO-2026-4601stdlib@go1.23.81.25.8
MediumGO-2026-4981stdlib@go1.23.81.25.10
MediumDEBIAN-CVE-2026-28389openssl@3.0.15-1~deb12u13.0.19-1~deb12u2
MediumDEBIAN-CVE-2026-28390openssl@3.0.15-1~deb12u13.0.19-1~deb12u2
LowGO-2026-4977stdlib@go1.23.81.25.10
LowDEBIAN-CVE-2026-57433perl@5.36.0-7+deb12u25.36.0-7+deb12u4
LowDEBIAN-CVE-2026-32316jq@1.6-2.11.6-2.1+deb12u3
LowGO-2026-4986stdlib@go1.23.81.25.10
LowDEBIAN-CVE-2026-40356krb5@1.20.1-2+deb12u21.20.1-2+deb12u5
LowGO-2026-4918stdlib@go1.23.81.25.10
LowGO-2026-4918golang.org/x/net@v0.33.00.53.0
LowDEBIAN-CVE-2026-13221perl@5.36.0-7+deb12u25.36.0-7+deb12u4
LowDEBIAN-CVE-2026-42496perl@5.36.0-7+deb12u25.36.0-7+deb12u4
LowDEBIAN-CVE-2026-42013gnutls28@3.7.9-2+deb12u43.7.9-2+deb12u7
LowDEBIAN-CVE-2026-9076openssl@3.0.15-1~deb12u13.0.20-1~deb12u2
LowDEBIAN-CVE-2026-45445openssl@3.0.15-1~deb12u13.0.20-1~deb12u2
LowDEBIAN-CVE-2026-66032libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowDEBIAN-CVE-2023-50495ncurses@6.4-4no fix listed
LowDEBIAN-CVE-2026-12087perl@5.36.0-7+deb12u25.36.0-7+deb12u4
LowDEBIAN-CVE-2025-4802glibc@2.36-9+deb12u102.36-9+deb12u11
LowDEBIAN-CVE-2026-4046glibc@2.36-9+deb12u102.36-9+deb12u14
LowGO-2025-4009stdlib@go1.23.81.24.8
LowDEBIAN-CVE-2026-5773curl@7.88.1-10+deb12u127.88.1-10+deb12u15
LowDEBIAN-CVE-2026-54411pam@1.5.2-6+deb12u1no fix listed
LowGO-2025-4006stdlib@go1.23.81.24.8
LowDEBIAN-CVE-2026-7598libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowDEBIAN-CVE-2026-82560perl@5.36.0-7+deb12u2no fix listed
LowDEBIAN-CVE-2026-54874openssl@3.0.15-1~deb12u13.0.22-1~deb12u1
LowGO-2026-4870stdlib@go1.23.81.25.9
LowDEBIAN-CVE-2026-41992gzip@1.12-1no fix listed
LowGO-2026-4971stdlib@go1.23.81.25.10
LowDEBIAN-CVE-2026-0915glibc@2.36-9+deb12u102.36-9+deb12u14
LowGO-2026-4947stdlib@go1.23.81.25.9
LowDEBIAN-CVE-2026-48959perl@5.36.0-7+deb12u25.36.0-7+deb12u4
LowDEBIAN-CVE-2026-40164jq@1.6-2.11.6-2.1+deb12u2
LowDEBIAN-CVE-2025-69419openssl@3.0.15-1~deb12u13.0.18-1~deb12u2
LowGO-2026-5037stdlib@go1.23.81.25.11
LowGO-2026-6603golang.org/x/net@v0.33.00.60.0
LowGO-2026-6603stdlib@go1.23.81.26.9
LowGO-2026-5972stdlib@go1.23.81.25.13
LowGO-2026-6088stdlib@go1.23.81.25.13
LowGO-2026-6089stdlib@go1.23.81.25.13
LowGO-2026-6090stdlib@go1.23.81.25.13
LowGO-2026-6611golang.org/x/net@v0.33.00.60.0

Used by

1 chart
ChartVersionTagContainers
arlas-aiasarlas-stackVerified publisher28.10.0, 28.9.0, 28.8.012-debian-12-r436

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.