devopstales/trivy-operator:2.5 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of devopstales/trivy-operator

devopstales/trivy-operator:2.5 resolved to 75136aa7a26e, scanned 14 Sept 2026: 422 findings, 2 critical, 2 on KEV; deployed by 1 chart, among them trivy-operator.

Radar Score

5,59821587318

422 findings on digest 75136aa7a26e · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.5resolves to	75136aa7a26e	1 chart	8 days ago	21587318	5,598

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

422 distinct on this digest

Findings for digest 75136aa7a26e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-45c4-8wx5-qw6w	aiohttp@3.8.3	3.8.5
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.3.0	0.52.0
Low	ALPINE-CVE-2023-1255	openssl@3.0.7-r2	3.0.8-r4
Low	GHSA-4vrq-3vrq-g6gg	github.com/moby/buildkit@v0.11.0	0.28.1
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.4.0	0.13.0
Low	GHSA-r6ph-v2qm-q3c2	cryptography@39.0.0	46.0.5
Low	GHSA-mcj4-mphf-j9ff	github.com/aquasecurity/trivy@v0.37.1	0.71.1
Low	PYSEC-2026-2095	aiohttp@3.8.3	3.13.4
Low	GHSA-4fvr-rgm6-gqmc	aiohttp@3.8.3	3.14.1
Low	GO-2023-2185	stdlib@go1.18.10	1.20.11
Low	ALPINE-CVE-2023-46219	curl@7.87.0-r1	8.5.0-r0
Low	ALPINE-CVE-2024-4603	openssl@3.0.7-r2	3.0.13-r0
Low	PYSEC-2026-3553	cryptography@39.0.0	49.0.0
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.3.1	5.9.0
Low	ALPINE-CVE-2022-4203	openssl@3.0.7-r2	3.0.8-r0
Low	ALPINE-CVE-2024-0853	curl@7.87.0-r1	8.6.0-r0
Low	GHSA-wf93-45jw-7689	pip@22.0.4	26.1.2
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v23.0.0-rc.1+incompatible	29.2.0
Low	GHSA-mq39-4gv4-mvpx	github.com/docker/docker@v23.0.0-rc.1+incompatible	23.0.11
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.3	1.1.5
Low	GHSA-7gpw-8wmc-pm8g	aiohttp@3.8.3	3.9.4
Low	GHSA-v53g-5gjp-272r	helm.sh/helm/v3@v3.10.3	3.14.1
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.4.8	0.6.4
Low	GO-2023-1703	stdlib@go1.18.10	1.19.8
Low	GHSA-9hjg-9r4m-mvj7	requests@2.28.2	2.32.4
Low	GHSA-w2fm-2cpv-w7v5	aiohttp@3.8.3	3.13.4
Low	GHSA-9p26-698r-w4hx	github.com/moby/buildkit@v0.11.0	0.12.5
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.4.8	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.4.8	0.6.4
Low	GHSA-qvrw-v9rv-5rjx	aiohttp@3.8.3	3.9.0
Low	GHSA-8495-4g3g-x7pr	aiohttp@3.8.3	3.10.11
Low	GHSA-47q9-m4ww-924m	github.com/sigstore/rekor@v1.0.1	1.5.2
Low	GO-2026-4341	stdlib@go1.18.10	1.24.12
Low	GHSA-5xqw-8hwv-wg92	helm.sh/helm/v3@v3.10.3	3.17.3
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.4.2	5.19.2
Low	PYSEC-2026-2106	aiohttp@3.8.3	3.14.0
Low	GHSA-3wq7-rqq7-wx6j	aiohttp@3.8.3	3.13.4
Low	GO-2024-2887	stdlib@go1.18.10	1.21.11
Low	GHSA-4hfp-h4cw-hj8p	helm.sh/helm/v3@v3.10.3	3.17.3
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v23.0.0-rc.1+incompatible	no fix listed
Low	GHSA-fh55-r93g-j68g	aiohttp@3.8.3	3.13.3
Low	GO-2023-1704	stdlib@go1.18.10	1.19.8
Low	ALPINE-CVE-2025-26519	musl@1.2.3-r4	1.2.3-r6
Low	PYSEC-2026-2113	aiohttp@3.8.3	3.14.1
Low	GHSA-54jq-c3m8-4m76	aiohttp@3.8.3	3.13.3
Low	PYSEC-2026-2112	aiohttp@3.8.3	3.14.1
Low	PYSEC-2026-237	aiohttp@3.8.3	3.14.1
Low	ALPINE-CVE-2023-28322	curl@7.87.0-r1	8.1.0-r0
Low	GHSA-mfx4-hv73-q22v	aiohttp@3.8.3	3.14.2
Low	GO-2023-1568	stdlib@go1.18.10	1.19.6

Used by

1 chart

Chart	Version	Tag	Containers
trivy-operatordevopstalesVerified publisher	2.5.0	2.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.