StackRadar

confluentinc/cp-kafka:5.4.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of confluentinc/cp-kafka

confluentinc/cp-kafka:5.4.0 resolved to 1bbda887bc53, scanned 14 Sept 2026: 151 findings, 5 critical; deployed by 1 chart, among them sentry-db.

Radar Score

3,6935127757

151 findings on digest 1bbda887bc53 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
5.4.0resolves to1bbda887bc531 chart6 days ago51277573,693

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

151 distinct on this digest

Findings for digest 1bbda887bc53 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-q2x7-8rv6-6q7hjinja2@2.9.63.1.5
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.42.Final4.1.137.Final
LowGHSA-c43q-5hpj-4crvjersey-common@2.282.34
LowGHSA-g8m5-722r-8whqjetty-server@9.4.20.v201908139.4.56
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.231.31
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.42.Final4.1.125.Final
LowGHSA-q4rv-gq96-w7c5jetty-server@9.4.20.v201908139.4.57.v20241219
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.42.Final4.1.133.Final
LowGHSA-c653-97m9-rcg9netty-handler@4.1.42.Final4.1.135.Final
LowGHSA-558v-64gr-wgg4netty-codec@4.1.42.Final4.1.136.Final
LowDLA-2151-1icu@52.1-8+deb8u752.1-8+deb8u8
LowGHSA-wf93-45jw-7689pip@8.1.226.1.2
LowGHSA-hmr7-m48g-48f6jetty-http@9.4.20.v201908139.4.52
LowGHSA-h75v-3vvj-5mfjjinja2@2.9.63.1.4
LowGHSA-9hjg-9r4m-mvj7requests@2.11.12.32.4
LowGHSA-h5c8-rqwp-cp95jinja2@2.9.63.1.3
LowGHSA-j26w-f9rq-mr2qjetty-servlets@9.4.20.v201908139.4.54
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.42.Final4.1.137.Final
LowGHSA-4xh5-x5gv-qwphpip@8.1.225.3
LowGHSA-h35f-9h28-mq5csetuptools@44.0.083.0.0
LowGHSA-4g9r-vxhx-9pgxcommons-compress@1.191.26.0
LowDLA-2210-1apt@1.0.9.8.51.0.9.8.6
LowPYSEC-2026-3721pip@8.1.226.2
LowGHSA-mq26-g339-26xfpip@8.1.223.3
LowGHSA-cpwx-vrp4-4pq7jinja2@2.9.63.1.6
LowDLA-1935-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u1
LowGHSA-xq3w-v528-46rvnetty-common@4.1.42.Final4.1.115.Final
LowGHSA-r7wm-3cxj-wff9jackson-core@2.9.102.18.8
LowDLA-2156-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u2
LowGHSA-389x-839f-4rhxnetty-common@4.1.42.Final4.1.118.Final
LowDLA-2221-1sqlite3@3.8.7.1-1+deb8u43.8.7.1-1+deb8u6
LowGHSA-9wx4-h78v-vm56requests@2.11.12.32.0
LowGHSA-hgj6-7826-r7m5jackson-databind@2.9.10.12.18.8
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.9.10.12.18.9
LowGHSA-qh8g-58pp-2wxhjetty-http@9.4.20.v2019081312.0.12
LowGHSA-7p3p-8qv8-m2vhjetty-server@9.4.20.v20190813no fix listed
LowGHSA-3gh6-v5v9-6v9jjetty-servlets@9.4.20.v201908139.4.52
LowGHSA-m6cp-vxjx-65j6jetty-server@9.4.20.v201908139.4.41
LowGHSA-7g45-4rm6-3mm3guava@20.032.0.0-android
LowGHSA-5mg8-w23w-74h3guava@20.032.0.0-android
LowDLA-1931-1libgcrypt20@1.6.3-2+deb8u51.6.3-2+deb8u6
LowPYSEC-2026-2275requests@2.11.12.33.0
LowGHSA-wf8f-6423-gfxgjackson-core@2.9.102.13.0
LowGHSA-cj7v-27pg-wf7qjetty-http@9.4.20.v201908139.4.47
LowGHSA-jp4c-xjxw-mgf9pip@8.1.226.1
LowGHSA-p26g-97m4-6q7cjetty-server@9.4.20.v201908139.4.51.v20230217
LowGHSA-58qw-9mgm-455vpip@8.1.226.1
LowGHSA-w573-9ffj-6ff9netty-transport-native-epoll@4.1.42.Final4.1.135.Final
LowGHSA-wjpw-4j6x-6rwhjetty-http@9.4.20.v20190813no fix listed
LowDLA-1957-1tzdata@2019a-0+deb8u12019c-0+deb8u1

Used by

1 chart
ChartVersionTagContainers
sentry-dbsentry0.9.45.4.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.