craigwillis/c2metadata-bd:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of craigwillis/c2metadata-bd

craigwillis/c2metadata-bd:latest resolved to ae317d7e4724, scanned 14 Sept 2026: 306 findings, 14 critical, 5 on KEV; deployed by 1 chart, among them polyglot.

Radar Score

8,020144615393

306 findings on digest ae317d7e4724 · scanned 14 Sept 2026

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	ae317d7e4724	1 chart	6 days ago	144615393	8,020

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

306 distinct on this digest

Findings for digest ae317d7e4724 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	PYSEC-2023-221	werkzeug@1.0.1	2.3.8
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.2.3	2.15.0
Medium	GHSA-2ppp-9496-p23q	spring-security-core@4.1.3.RELEASE	4.2.16
Medium	GHSA-v596-fwhq-8x48	spring-security-core@4.1.3.RELEASE	4.1.5
Medium	GHSA-v596-fwhq-8x48	spring-core@4.3.2.RELEASE	4.3.14
Medium	GHSA-q6g2-g7f3-rr83	jettison@1.1	1.5.4
Medium	GHSA-r346-rmrg-qpgh	resteasy-client@3.0.9.Final	3.0.20.Final
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.12	1.32
Medium	GHSA-6v7w-535j-rq5m	spring-web@4.1.1.RELEASE	4.1.7
Medium	GHSA-mf92-479x-3373	spring-security-web@4.1.3.RELEASE	no fix listed
Medium	GHSA-9xfc-j5mf-9w5p	resteasy-client@3.0.9.Final	3.0.20.Final
Medium	GHSA-gp7f-rwcx-9369	jsoup@1.7.2	1.15.3
Medium	GHSA-5xp3-jfq3-5q8x	pip@20.1.1	21.1
Low	PYSEC-2026-2132	click@7.1.2	8.3.3
Low	GHSA-pc54-pchm-xcw6	resteasy-jaxrs@3.0.9.Final	3.0.11.Final
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.0.13	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.0.13	1.2.13
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.32.v20200930	9.4.63
Low	GHSA-45vg-2v73-vm62	spring-core@4.1.1.RELEASE	4.1.5
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.1.0	3.6.1
Low	GHSA-564r-hj7v-mcr5	spring-expression@4.1.1.RELEASE	5.2.23.RELEASE
Low	GHSA-q2x7-8rv6-6q7h	jinja2@2.11.2	3.1.5
Low	GHSA-xqr8-7jwr-rhp7	certifi@2020.11.8	2023.7.22
Low	GHSA-r7p8-xq5m-436c	jetty-jaspi@9.4.32.v20200930	9.4.61
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.32.v20200930	9.4.56
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.12	1.31
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.32.v20200930	9.4.57.v20241219
Low	GHSA-f9vj-2wh5-fj8j	werkzeug@1.0.1	3.0.6
Low	GHSA-hr32-mgpm-qf2f	resteasy-client@3.0.9.Final	3.14.0.Final
Low	GHSA-x23c-287f-qqv5	spring-webmvc@4.3.3.RELEASE	no fix listed
Low	GHSA-43fp-rhv2-5gv8	certifi@2020.11.8	2022.12.07
Low	GHSA-wf93-45jw-7689	pip@20.1.1	26.1.2
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.32.v20200930	9.4.52
Low	GHSA-h75v-3vvj-5mfj	jinja2@2.11.2	3.1.4
Low	GHSA-r5w3-xv2f-j59q	spring-expression@4.1.1.RELEASE	no fix listed
Low	GHSA-9hjg-9r4m-mvj7	requests@2.25.0	2.32.4
Low	GHSA-269g-pwp5-87pp	junit@4.11	4.13.1
Low	GHSA-h5c8-rqwp-cp95	jinja2@2.11.2	3.1.3
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.32.v20200930	9.4.54
Low	GHSA-29vq-49wr-vm6x	werkzeug@1.0.1	3.1.6
Low	GHSA-hgf8-39gv-g3f2	werkzeug@1.0.1	3.1.4
Low	GHSA-2rmj-mq67-h97g	spring-web@4.1.1.RELEASE	5.3.38
Low	GHSA-775g-4xr8-78h8	spring-expression@4.1.1.RELEASE	no fix listed
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.1	1.26.19
Low	GHSA-4xh5-x5gv-qwph	pip@20.1.1	25.3
Low	GHSA-pr98-23f8-jwxv	logback-core@1.0.13	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.0.13	1.5.34
Low	GHSA-h35f-9h28-mq5c	setuptools@50.3.0	83.0.0
Low	GHSA-4gc7-5j7h-4qph	spring-context@4.1.1.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@4.1.1.RELEASE	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
polyglotncsaVerified publisher	0.1.1	latest	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.