bitnamilegacy/os-shell:12-debian-12-r43 container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/os-shell

bitnamilegacy/os-shell:12-debian-12-r43 resolved to 9ba5d16f9c64, scanned 21 Oct 2026: 382 findings, 1 critical; deployed by 1 chart, among them arlas-aias.

Radar Score

4,1361059322

382 findings on digest 9ba5d16f9c64 · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
12-debian-12-r43resolves to	9ba5d16f9c64	1 chart	yesterday	1059322	4,136

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

382 distinct on this digest

Findings for digest 9ba5d16f9c64 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u10	no fix listed
Low	GO-2026-6609	stdlib@go1.23.8	1.26.9
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2026-80230	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-107778	krb5@1.20.1-2+deb12u2	no fix listed
Low	GO-2025-3956	stdlib@go1.23.8	1.23.12
Low	GO-2026-4946	stdlib@go1.23.8	1.25.9
Low	GO-2025-3595	golang.org/x/net@v0.33.0	0.38.0
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2026-6629	golang.org/x/text@v0.21.0	0.41.0
Low	DEBIAN-CVE-2026-42015	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u10	no fix listed
Low	GO-2026-6613	stdlib@go1.23.8	1.26.9
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-9547	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.5.2-6+deb12u1	no fix listed
Low	GO-2025-3849	stdlib@go1.23.8	1.23.12
Low	GO-2026-6605	stdlib@go1.23.8	1.26.9
Low	DEBIAN-CVE-2026-3784	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DSA-6015-1	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Low	DSA-5931-1	systemd@252.36-1~deb12u1	252.38-1~deb12u1
Low	GO-2026-6610	golang.org/x/net@v0.33.0	0.60.0
Low	GO-2026-6610	stdlib@go1.23.8	1.26.9
Low	DEBIAN-CVE-2024-23337	jq@1.6-2.1	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.33.0	0.55.0
Low	DEBIAN-CVE-2026-57432	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-63074	openssl@3.0.15-1~deb12u1	3.0.22-1~deb12u1
Low	DEBIAN-CVE-2026-88647	gnutls28@3.7.9-2+deb12u4	no fix listed
Low	DEBIAN-CVE-2016-2781	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg-10	no fix listed
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DEBIAN-CVE-2026-42767	openssl@3.0.15-1~deb12u1	3.0.22-1~deb12u1
Low	DEBIAN-CVE-2026-5545	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-89157	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-14819	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	GO-2026-4970	stdlib@go1.23.8	1.25.12
Low	DEBIAN-CVE-2025-40909	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
Low	DEBIAN-CVE-2026-8458	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DSA-6140-1	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u5
Low	GO-2025-4012	stdlib@go1.23.8	1.24.8
Low	DEBIAN-CVE-2026-103111	pcre2@10.42-1	10.42-1+deb12u2

Used by

1 chart

Chart	Version	Tag	Containers
arlas-aiasarlas-stackVerified publisher	28.10.0, 28.9.0, 28.8.0	12-debian-12-r43	6

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.