broadinstitute/dsde-toolbox:master container image

Docker Hub

Scanned 28 Sept 2026

Deployed by 1 of 17,926 indexed charts (latest versions) at this tag.Docker Hub all tags of broadinstitute/dsde-toolbox

broadinstitute/dsde-toolbox:master resolved to 656131886a08, scanned 28 Sept 2026: 407 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them sqlbackup.

Radar Score

5,376011104292

407 findings on digest 656131886a08 · scanned 28 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
masterresolves to	656131886a08	1 chart	today	011104292	5,376

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

292 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 656131886a08 as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-cfm4-qjh2-4765	node-forge@0.7.6	1.3.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.18.0	0.32.0
Low	GHSA-vg3r-rm7w-2xgh	rexml@3.2.3.1	3.2.7
Low	GHSA-wpfp-cm49-9m9q	github.com/hashicorp/go-slug@v0.7.0	0.16.3
Low	GO-2023-1571	stdlib@go1.16.10	1.19.6
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.5.10	1.15.6
Low	GHSA-554w-wpv2-vw27	node-forge@0.7.6	1.3.2
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.3	2.5.6
Low	GHSA-j5g9-f88f-gfj3	httplib2@0.22.0	0.32.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.19	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.19	7.5.18
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.5.10	1.16.0
Low	GHSA-7vpp-9cxj-q8gv	github.com/mholt/archiver@v3.1.1+incompatible	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
Low	GO-2022-0435	stdlib@go1.16.10	1.17.9
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.0	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.0	0.6.4
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.0	0.6.4
Low	GHSA-pw2r-vq6v-hr8c	follow-redirects@1.5.10	1.14.8
Low	GHSA-f5x3-32g6-xq36	tar@4.4.19	6.2.1
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20211209124913-491a49abca63
Low	GO-2022-0288	stdlib@go1.16.10	1.16.12
Low	GHSA-hww2-5g85-429m	uri@0.10.0	0.10.0.3
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GHSA-vmwr-mc7x-5vc3	rexml@3.2.3.1	3.3.6
Low	GO-2023-2102	stdlib@go1.16.10	1.20.10
Low	GHSA-xqr8-7jwr-rhp7	certifi@2020.4.5.1	2023.7.22
Low	GHSA-wf93-45jw-7689	pip@20.1.1	26.1.2
Low	GHSA-j4pr-3wm6-xx2r	uri@0.10.0	0.12.5
Low	GHSA-r292-9mhp-454m	tar@4.4.19	7.5.21
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20200615164410-66371956d46c	0.1.1
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v20.10.10+incompatible	20.10.24
Low	GHSA-pmwg-cvhr-8vh7	axios@0.18.0	0.31.1
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-qffp-2rhf-9h96	tar@4.4.19	7.5.10
Low	GHSA-rhh4-rh7c-7r5v	github.com/mholt/archiver@v3.1.1+incompatible	no fix listed
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.19	7.5.3
Low	GO-2022-0969	stdlib@go1.16.10	1.18.6
Low	GHSA-776f-qx25-q3cc	xml2js@0.4.19	0.5.0
Low	GHSA-6v7p-g79w-8964	msgpack@1.0.0	1.2.1
Low	GO-2021-0347	stdlib@go1.16.10	1.16.15
Low	GHSA-2328-f5f3-gj25	node-forge@0.7.6	1.4.0
Low	GHSA-q67f-28xg-22rw	node-forge@0.7.6	1.4.0
Low	GO-2021-0319	stdlib@go1.16.10	1.16.14
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.13.0
Low	GHSA-8fr3-hfg3-gpgp	node-forge@0.7.6	1.0.0

Used by

1 chart

Chart	Version	Tag	Containers
sqlbackupdatarepo	0.0.3	master	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.