commerceexperts/smartquery-service:2.2.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of commerceexperts/smartquery-service

commerceexperts/smartquery-service:2.2.0 resolved to 9e33ad89baf6, scanned 14 Sept 2026: 103 findings, 2 critical; deployed by 1 chart, among them smartquery.

Radar Score

1,528242374

103 findings on digest 9e33ad89baf6 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.2.0resolves to	9e33ad89baf6	1 chart	5 days ago	242374	1,528

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

74 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 9e33ad89baf6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.10.5	no fix listed
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.12	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.12	1.2.13
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.51.v20230217	9.4.63
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.5	2.14.0
Low	GHSA-w33c-445m-f8w7	okio@2.8.0	3.4.0
Low	GHSA-gm62-rw4g-vrc4	logback-core@1.2.12	1.2.13
Low	GHSA-mg83-c7gq-rv5c	spring-security-crypto@5.7.10	5.7.16
Low	ALPINE-CVE-2023-5388	nss@3.97-r0	3.98-r0
Low	ALPINE-CVE-2025-29087	sqlite@3.44.2-r0	3.44.2-r1
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.51.v20230217	9.4.56
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.30	1.31
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.2	2.25.5
Low	GHSA-mgvc-8q2h-5pgc	spring-boot-starter-actuator@2.7.15	no fix listed
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.51.v20230217	9.4.57.v20241219
Low	GHSA-jmp9-x22r-554x	spring-core@5.3.29	no fix listed
Low	GHSA-jjfh-589g-3hjx	spring-boot-actuator@2.7.15	2.7.18
Low	ALPINE-CVE-2024-4603	openssl@3.1.4-r5	3.1.5-r0
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.3.29	no fix listed
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.7.15	no fix listed
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.51.v20230217	9.4.52
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.3.29	no fix listed
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.51.v20230217	9.4.54
Low	GHSA-2rmj-mq67-h97g	spring-web@5.3.29	5.3.38
Low	ALPINE-CVE-2025-26519	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r5
Low	GHSA-775g-4xr8-78h8	spring-expression@5.3.29	no fix listed
Low	GHSA-w3c8-7r8f-9jp8	spring-webmvc@5.3.29	5.3.42
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.12	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.12	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.3.29	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.3.29	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.29	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.29	no fix listed
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r15	1.36.1-r17
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.3.29	no fix listed
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.5	2.18.8
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.29	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.5	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.29	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.5	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.29	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.51.v20230217	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.7.10	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.7.15	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.51.v20230217	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.29	5.3.39

Used by

1 chart

Chart	Version	Tag	Containers
smartquerysearchhub	0.1.0	2.2.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.