StackRadar

bkimminich/juice-shop:v20.1.1 container image

Docker Hub

Scanned 8 Sept 2026

Deployed by 0 of 18,035 indexed charts (latest versions) at this tag.Docker Hub all tags of bkimminich/juice-shop

bkimminich/juice-shop:v20.1.1 resolved to cd58d79c5cb4, scanned 8 Sept 2026: 113 findings, 0 critical; deployed by 0 charts.

Radar Score

1,560013676

113 findings on digest cd58d79c5cb4 · scanned 8 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v20.1.1resolves tocd58d79c5cb4—1 month ago0136761,560

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

113 distinct on this digest

Findings for digest cd58d79c5cb4 as scanned on 8 Sept 2026 for linux/amd64, advisories as of 8 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighGHSA-35jh-r3h4-6jhmlodash@2.4.24.17.21
MediumGHSA-c7hr-j4mj-j2w6jsonwebtoken@0.4.04.2.2
MediumGHSA-jf85-cpcp-j695lodash@2.4.24.17.12
MediumGHSA-87vv-r9j6-g5qvmoment@2.0.02.11.2
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12+deb13u3no fix listed
MediumGHSA-8hfj-j24r-96c4moment@2.0.02.29.2
MediumDEBIAN-CVE-2018-20796glibc@2.41-12+deb13u3no fix listed
MediumGHSA-p6mc-m468-83gwlodash.set@4.3.2no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.41-12+deb13u3no fix listed
MediumGHSA-446m-mv8f-q348moment@2.0.02.19.3
MediumDEBIAN-CVE-2019-9192glibc@2.41-12+deb13u3no fix listed
MediumDEBIAN-CVE-2026-63073openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@3.8.14.1.1
MediumGHSA-4xc9-xhrj-v574lodash@2.4.24.17.11
MediumGHSA-fvqr-27wr-82fmlodash@2.4.24.17.5
MediumDEBIAN-CVE-2026-18798openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumGHSA-cgfm-xwp7-2cvrsanitize-html@1.4.22.7.1
MediumGHSA-3h5v-q93c-6h6qws@7.4.67.5.10
MediumGHSA-mp2f-45pm-3cg9decompress@4.2.1no fix listed
MediumDEBIAN-CVE-2026-63076openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumGHSA-r7qp-cfhv-p84wengine.io@4.1.26.2.1
MediumDEBIAN-CVE-2019-1010024glibc@2.41-12+deb13u3no fix listed
MediumGHSA-6g6m-m6h5-w9gfexpress-jwt@0.1.36.0.0
MediumGHSA-xwcq-pm8m-c4vfcrypto-js@3.3.04.2.0
MediumDEBIAN-CVE-2026-5450glibc@2.41-12+deb13u3no fix listed
MediumGHSA-5528-5vmv-3xc2multer@1.4.5-lts.22.1.1
MediumGHSA-f23m-r3pf-42rhlodash@2.4.24.18.0
MediumGHSA-v52c-386h-88mcmulter@1.4.5-lts.22.1.0
MediumGHSA-xf7r-hgr6-v32pmulter@1.4.5-lts.22.1.0
MediumDEBIAN-CVE-2026-14457openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumGHSA-cqmj-92xf-r6r9socket.io-parser@4.0.54.2.3
MediumGHSA-pfrx-2q88-qq97got@8.3.211.8.5
MediumDEBIAN-CVE-2019-1010025glibc@2.41-12+deb13u3no fix listed
MediumGHSA-96hv-2xvq-fx4pws@7.4.67.5.11
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.53.1.3
MediumGHSA-677m-j7p3-52f9socket.io-parser@4.0.54.2.6
MediumGHSA-4pg4-qvpc-4q3hmulter@1.4.5-lts.22.0.0
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.20.5.0
LowGHSA-44fp-w29j-9vj5multer@1.4.5-lts.22.0.0
LowDEBIAN-CVE-2026-14456openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
LowGHSA-34x7-hfp2-rc4vtar@6.2.17.5.7
LowGHSA-rjqq-98f6-6j3rsanitize-html@1.4.22.3.1
LowGHSA-fjgf-rc76-4x9pmulter@1.4.5-lts.22.0.2
LowGHSA-g5hg-p3ph-g8qgmulter@1.4.5-lts.22.0.1
LowGHSA-8g4m-cjm2-96wqnotevil@1.3.3no fix listed
LowGHSA-25hc-qcg6-38wjsocket.io@3.1.24.6.2
LowGHSA-r635-g3xr-vw7xengine.io@4.1.26.6.7
LowGHSA-rgw5-rvv9-x895brace-expansion@2.1.12.1.4
LowGHSA-mjxr-4v3x-q3m4sanitize-html@1.4.22.3.2
LowDEBIAN-CVE-2026-63072openssl@3.5.6-1~deb13u23.5.7-1~deb13u2

Used by

0 charts

No indexed chart deploys this repository in its latest version.

Also in older indexed versions (1)

Not counted above: the chart’s latest version no longer references it, or the chart is no longer in the index.

ChartVersionTagContainers
juice-shopsecurecodeboxnot in the index5.8.0v20.1.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 8 Sept 2026 · advisories as of 8 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.