confluentinc/cp-kafka:5.4.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of confluentinc/cp-kafka
confluentinc/cp-kafka:5.4.0 resolved to 1bbda887bc53, scanned 14 Sept 2026: 151 findings, 5 critical; deployed by 1 chart, among them sentry-db.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
151 distinct on this digest
Findings for digest 1bbda887bc53 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | GHSA-c43q-5hpj-4crv | jersey-common | 2.34 |
| Low | GHSA-g8m5-722r-8whq | jetty-server | 9.4.56 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-q4rv-gq96-w7c5 | jetty-server | 9.4.57.v20241219 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | DLA-2151-1 | icu | 52.1-8+deb8u8 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | GHSA-hmr7-m48g-48f6 | jetty-http | 9.4.52 |
| Low | GHSA-h75v-3vvj-5mfj | jinja2 | 3.1.4 |
| Low | GHSA-9hjg-9r4m-mvj7 | requests | 2.32.4 |
| Low | GHSA-h5c8-rqwp-cp95 | jinja2 | 3.1.3 |
| Low | GHSA-j26w-f9rq-mr2q | jetty-servlets | 9.4.54 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | GHSA-4g9r-vxhx-9pgx | commons-compress | 1.26.0 |
| Low | DLA-2210-1 | apt | 1.0.9.8.6 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | GHSA-mq26-g339-26xf | pip | 23.3 |
| Low | GHSA-cpwx-vrp4-4pq7 | jinja2 | 3.1.6 |
| Low | DLA-1935-1 | e2fsprogs | 1.42.12-2+deb8u1 |
| Low | GHSA-xq3w-v528-46rv | netty-common | 4.1.115.Final |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | DLA-2156-1 | e2fsprogs | 1.42.12-2+deb8u2 |
| Low | GHSA-389x-839f-4rhx | netty-common | 4.1.118.Final |
| Low | DLA-2221-1 | sqlite3 | 3.8.7.1-1+deb8u6 |
| Low | GHSA-9wx4-h78v-vm56 | requests | 2.32.0 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-qh8g-58pp-2wxh | jetty-http | 12.0.12 |
| Low | GHSA-7p3p-8qv8-m2vh | jetty-server | no fix listed |
| Low | GHSA-3gh6-v5v9-6v9j | jetty-servlets | 9.4.52 |
| Low | GHSA-m6cp-vxjx-65j6 | jetty-server | 9.4.41 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | DLA-1931-1 | libgcrypt20 | 1.6.3-2+deb8u6 |
| Low | PYSEC-2026-2275 | requests | 2.33.0 |
| Low | GHSA-wf8f-6423-gfxg | jackson-core | 2.13.0 |
| Low | GHSA-cj7v-27pg-wf7q | jetty-http | 9.4.47 |
| Low | GHSA-jp4c-xjxw-mgf9 | pip | 26.1 |
| Low | GHSA-p26g-97m4-6q7c | jetty-server | 9.4.51.v20230217 |
| Low | GHSA-58qw-9mgm-455v | pip | 26.1 |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-wjpw-4j6x-6rwh | jetty-http | no fix listed |
| Low | DLA-1957-1 | tzdata | 2019c-0+deb8u1 |