broadinstitute/dsde-toolbox:master container image

Docker Hub

Scanned 28 Sept 2026

Deployed by 1 of 17,926 indexed charts (latest versions) at this tag.Docker Hub all tags of broadinstitute/dsde-toolbox

broadinstitute/dsde-toolbox:master resolved to 656131886a08, scanned 28 Sept 2026: 407 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them sqlbackup.

Radar Score

5,376011104292

407 findings on digest 656131886a08 · scanned 28 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
masterresolves to	656131886a08	1 chart	today	011104292	5,376

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

407 distinct on this digest

Findings for digest 656131886a08 as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v20.10.10+incompatible	20.10.24
Low	GHSA-pmwg-cvhr-8vh7	axios@0.18.0	0.31.1
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-qffp-2rhf-9h96	tar@4.4.19	7.5.10
Low	GHSA-rhh4-rh7c-7r5v	github.com/mholt/archiver@v3.1.1+incompatible	no fix listed
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.19	7.5.3
Low	GO-2022-0969	stdlib@go1.16.10	1.18.6
Low	GHSA-776f-qx25-q3cc	xml2js@0.4.19	0.5.0
Low	GHSA-6v7p-g79w-8964	msgpack@1.0.0	1.2.1
Low	GO-2021-0347	stdlib@go1.16.10	1.16.15
Low	GHSA-2328-f5f3-gj25	node-forge@0.7.6	1.4.0
Low	GHSA-q67f-28xg-22rw	node-forge@0.7.6	1.4.0
Low	GO-2021-0319	stdlib@go1.16.10	1.16.14
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.13.0
Low	GHSA-8fr3-hfg3-gpgp	node-forge@0.7.6	1.0.0
Low	GO-2022-0493	stdlib@go1.16.10	1.17.10
Low	GHSA-ppp5-5v6c-4jwp	node-forge@0.7.6	1.4.0
Low	GHSA-r6ph-v2qm-q3c2	cryptography@42.0.5	46.0.5
Low	GO-2021-0317	stdlib@go1.16.10	1.16.14
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.5.10	1.15.4
Low	PYSEC-2026-3554	cryptography@42.0.5	49.0.0
Low	GO-2023-2185	stdlib@go1.16.10	1.20.11
Low	GHSA-r6q2-hw4h-h46w	tar@4.4.19	7.5.4
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	GHSA-jwv3-5hgf-82ww	cryptography@42.0.5	49.0.0
Low	GHSA-gh9q-2xrm-x6qv	cgi@0.1.0.1	0.3.5.1
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v20.10.10+incompatible	no fix listed
Low	GHSA-43fp-rhv2-5gv8	certifi@2020.4.5.1	2022.12.07
Low	GHSA-w5hq-g745-h8pq	uuid@3.3.2	11.1.1
Low	GO-2022-0537	stdlib@go1.16.10	1.17.13
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.6.0	no fix listed
Low	GHSA-rc4r-wh2q-q6c4	github.com/docker/docker@v20.10.10+incompatible	20.10.18
Low	GHSA-6chq-wfr3-2hj9	axios@0.18.0	0.31.1
Low	GHSA-mq39-4gv4-mvpx	github.com/docker/docker@v20.10.10+incompatible	23.0.11
Low	GHSA-wf5p-g6vw-rhxx	axios@0.18.0	0.28.0
Low	GO-2026-4341	stdlib@go1.16.10	1.24.12
Low	GO-2023-1703	stdlib@go1.16.10	1.19.8
Low	GHSA-9hjg-9r4m-mvj7	requests@2.23.0	2.32.4
Low	GO-2022-0521	stdlib@go1.16.10	1.17.12
Low	GHSA-fvcv-3m26-pcqx	axios@0.18.0	0.31.0
Low	GHSA-2r2c-g63r-vccr	node-forge@0.7.6	1.3.0
Low	GHSA-8qvm-5x2c-j2w7	protobuf@5.27.2	5.29.5
Low	GO-2022-0477	stdlib@go1.16.10	1.17.11
Low	GO-2022-0533	stdlib@go1.16.10	1.17.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
Low	GHSA-3p68-rc4w-qgx5	axios@0.18.0	0.31.0
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.42.0	0.46.2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Used by

1 chart

Chart	Version	Tag	Containers
sqlbackupdatarepo	0.0.3	master	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.