broadinstitute/dsde-toolbox:master container image

Docker Hub

Scanned 28 Sept 2026

Deployed by 1 of 17,926 indexed charts (latest versions) at this tag.Docker Hub all tags of broadinstitute/dsde-toolbox

broadinstitute/dsde-toolbox:master resolved to 656131886a08, scanned 28 Sept 2026: 407 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them sqlbackup.

Radar Score

5,376011104292

407 findings on digest 656131886a08 · scanned 28 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
masterresolves to	656131886a08	1 chart	today	011104292	5,376

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

292 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 656131886a08 as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2023-1751	stdlib@go1.16.10	1.19.9
Low	GO-2023-1753	stdlib@go1.16.10	1.19.9
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.7.3	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.12.0	1.97.3
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.2	6.16.0
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v20.10.10+incompatible	no fix listed
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.10	0.5.15
Low	GO-2023-2041	stdlib@go1.16.10	1.20.8
Low	GHSA-9wx4-h78v-vm56	requests@2.23.0	2.32.0
Low	GO-2023-2043	stdlib@go1.16.10	1.20.8
Low	GO-2022-0515	stdlib@go1.16.10	1.17.12
Low	GO-2023-2186	stdlib@go1.16.10	1.20.11
Low	GO-2026-4981	stdlib@go1.16.10	1.25.10
Low	GHSA-rwvp-r38j-9rgg	github.com/nwaples/rardecode@v1.1.2	no fix listed
Low	GO-2024-3333	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.33.0
Low	GO-2026-4986	stdlib@go1.16.10	1.25.10
Low	GO-2026-4337	stdlib@go1.16.10	1.24.13
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GO-2024-3105	stdlib@go1.16.10	1.22.7
Low	GO-2022-1095	stdlib@go1.16.10	1.18.8
Low	GO-2023-1621	stdlib@go1.16.10	1.19.7
Low	GO-2025-3563	stdlib@go1.16.10	1.23.8
Low	GO-2026-4601	stdlib@go1.16.10	1.25.8
Low	GHSA-vmf3-w455-68vh	tar@4.4.19	7.5.16
Low	GO-2026-4977	stdlib@go1.16.10	1.25.10
Low	GHSA-xx6v-rp6x-q39c	axios@0.18.0	0.31.1
Low	GO-2024-2610	stdlib@go1.16.10	1.21.8
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.25.9	2.7.0
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.53.0
Low	GO-2026-4918	stdlib@go1.16.10	1.25.10
Low	GHSA-mhwm-jh88-3gjf	cgi@0.1.0.1	0.3.5.1
Low	GO-2026-4342	stdlib@go1.16.10	1.24.12
Low	GO-2026-4947	stdlib@go1.16.10	1.25.9
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.0.0-20210928084031-3df272774672	3.5.33
Low	GHSA-898c-q2cr-xwhg	axios@0.18.0	0.32.0
Low	GO-2026-5026	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
Low	GO-2026-5026	stdlib@go1.16.10	1.25.13
Low	GO-2025-3420	stdlib@go1.16.10	1.22.11
Low	GO-2026-4870	stdlib@go1.16.10	1.25.9
Low	GO-2024-2598	stdlib@go1.16.10	1.21.8
Low	GO-2025-3751	stdlib@go1.16.10	1.23.10
Low	GHSA-537c-gmf6-5ccf	cryptography@42.0.5	48.0.1
Low	GHSA-7543-mr7h-6v86	googleapis@34.0.0	39.1.0
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.41.0	1.56.3
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e
Low	GO-2026-5942	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.56.0
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.25.9	1.26.18
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0
Low	GO-2022-0532	stdlib@go1.16.10	1.17.11
Low	GO-2026-4971	stdlib@go1.16.10	1.25.10

Used by

1 chart

Chart	Version	Tag	Containers
sqlbackupdatarepo	0.0.3	master	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.