commerceexperts/smartquery-service:2.2.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of commerceexperts/smartquery-service
commerceexperts/smartquery-service:2.2.0 resolved to 9e33ad89baf6, scanned 14 Sept 2026: 103 findings, 2 critical; deployed by 1 chart, among them smartquery.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
103 distinct on this digest
Findings for digest 9e33ad89baf6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | ALPINE-CVE-2025-6965 | sqlite | 3.44.2-r2 |
| High | GHSA-4wrc-f8pq-fpqp | spring-web | 6.0.0 |
| High | ALPINE-CVE-2024-6119 | openssl | 3.1.7-r0 |
| High | GHSA-g5vr-rgqm-vf78 | spring-webmvc | no fix listed |
| High | ALPINE-CVE-2024-2511 | openssl | 3.1.4-r6 |
| Medium | GHSA-cx7f-g6mp-7hqm | spring-webmvc | no fix listed |
| Medium | ALPINE-CVE-2024-5535 | openssl | 3.1.6-r0 |
| Medium | GHSA-ccgv-vj62-xf9h | spring-web | 5.3.32 |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | GHSA-c4q5-6c82-3qpw | spring-security-web | 5.7.13 |
| Medium | ALPINE-CVE-2024-4741 | openssl | 3.1.6-r0 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | ALPINE-CVE-2025-9230 | openssl | 3.1.8-r1 |
| Medium | GHSA-2wrp-6fg6-hmc5 | spring-web | 5.3.34 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-c4r9-r8fh-9vj2 | snakeyaml | 1.31 |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | GHSA-f3jh-qvm4-mg39 | spring-security-core | 5.7.12 |
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | ALPINE-CVE-2024-9143 | openssl | 3.1.7-r1 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | GHSA-w37g-rhq8-7m4j | snakeyaml | 1.32 |
| Medium | GHSA-r936-gwx5-v52f | spring-webmvc | no fix listed |
| Medium | ALPINE-CVE-2025-9232 | openssl | 3.1.8-r1 |
| Medium | GHSA-mf92-479x-3373 | spring-security-web | no fix listed |
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | no fix listed |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-2fvj-hgj9-j2gr | jetty-security | 9.4.63 |
| Low | GHSA-3wrr-7qpf-2prh | jackson-databind | 2.14.0 |
| Low | GHSA-w33c-445m-f8w7 | okio | 3.4.0 |
| Low | GHSA-gm62-rw4g-vrc4 | logback-core | 1.2.13 |
| Low | GHSA-mg83-c7gq-rv5c | spring-security-crypto | 5.7.16 |
| Low | ALPINE-CVE-2023-5388 | nss | 3.98-r0 |
| Low | ALPINE-CVE-2025-29087 | sqlite | 3.44.2-r1 |
| Low | GHSA-g8m5-722r-8whq | jetty-server | 9.4.56 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | GHSA-mgvc-8q2h-5pgc | spring-boot-starter-actuator | no fix listed |
| Low | GHSA-q4rv-gq96-w7c5 | jetty-server | 9.4.57.v20241219 |
| Low | GHSA-jmp9-x22r-554x | spring-core | no fix listed |
| Low | GHSA-jjfh-589g-3hjx | spring-boot-actuator | 2.7.18 |
| Low | ALPINE-CVE-2024-4603 | openssl | 3.1.5-r0 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | no fix listed |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | no fix listed |
| Low | GHSA-hmr7-m48g-48f6 | jetty-http | 9.4.52 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| smartquerysearchhub | 0.1.0 | 2.2.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.