craigwillis/c2metadata-bd:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of craigwillis/c2metadata-bd
craigwillis/c2metadata-bd:latest resolved to ae317d7e4724, scanned 14 Sept 2026: 306 findings, 14 critical, 5 on KEV; deployed by 1 chart, among them polyglot.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Critical findings
14 distinct on this digest
Critical: findings whose contribution to the Radar Score is 70–100. Show every band
Findings for digest ae317d7e4724 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-webmvc | 5.2.20.RELEASE |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-beans | 5.2.20.RELEASE |
| Critical | GHSA-2qrg-x229-3v8q | log4j | no fix listed |
| Critical | GHSA-5rrx-jjjq-q2r5 | Microsoft.AspNetCore.Server.Kestrel.Core | 2.3.6 |
| Critical | GHSA-65fg-84f6-3jq3 | log4j | no fix listed |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-f7vh-qwp3-x37m | log4j | no fix listed |
| Critical | GHSA-rfx6-vp9g-rh7v | jackson-databind | 2.7.9.2 |
| Critical | GHSA-w9p3-5cr8-m3jj | log4j | no fix listed |
| Critical | GHSA-vmch-3w2x-vhgqKEV | Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv | 2.1.40 |
| Critical | GHSA-p66x-2cv9-qq3v | commons-beanutils | 1.9.4 |
| Critical | GHSA-vv7r-c36w-3prj | commons-fileupload | 1.6.0 |
| Critical | GHSA-qxxx-2pp7-5hmx | jackson-databind | 2.6.7.1 |
| Critical | GHSA-xx68-jfcg-xmmf | commons-fileupload | 1.3.1 |