gdrocha/togglr-backend:1.0.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gdrocha/togglr-backend
gdrocha/togglr-backend:1.0.0 resolved to d5ae64e83d4c, scanned 14 Sept 2026: 208 findings, 4 critical, 1 on KEV; deployed by 1 chart, among them togglr-backend.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest d5ae64e83d4c as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-2rmj-mq67-h97g | spring-web | 6.0.23 |
| Low | ALPINE-CVE-2025-66293 | libpng | 1.6.53-r0 |
| Low | ALPINE-CVE-2026-42012 | gnutls | 3.8.13-r0 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-2673 | openssl | 3.5.6-r0 |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 10.1.53 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-5545 | curl | 8.14.1-r3 |
| Low | ALPINE-CVE-2026-42015 | gnutls | 3.8.13-r0 |
| Low | GHSA-72hv-8253-57qq | jackson-core | 2.18.6 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2025-14831 | gnutls | 3.8.12-r0 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.5.13 |
| Low | ALPINE-CVE-2026-25210 | expat | 2.7.4-r0 |
| Low | ALPINE-CVE-2025-65018 | libpng | 1.6.51-r0 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-4gc7-5j7h-4qph | spring-web | no fix listed |
| Low | GHSA-4gc7-5j7h-4qph | spring-context | no fix listed |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r12 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.5.5-r0 |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.18.8 |
| Low | GHSA-4773-3jfm-qmx3 | spring-webmvc | no fix listed |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.5.5-r0 |
| Low | GHSA-5m4m-73w9-8433 | spring-data-commons | no fix listed |
| Low | GHSA-xq3w-v528-46rv | netty-common | 4.1.115.Final |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | GHSA-389x-839f-4rhx | netty-common | 4.1.118.Final |
| Low | GHSA-5vpf-xvv7-c8vh | spring-data-commons | no fix listed |
| Low | ALPINE-CVE-2026-22801 | libpng | 1.6.54-r0 |
| Low | ALPINE-CVE-2026-42769 | openssl | 3.5.7-r0 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GHSA-xg2j-3hj6-pc24 | spring-data-keyvalue | no fix listed |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2025-68973 | gnupg | 2.4.9-r0 |
| Low | ALPINE-CVE-2026-56403 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56404 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56405 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56408 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56406 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56407 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56410 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56411 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2025-64505 | libpng | 1.6.51-r0 |
| Low | ALPINE-CVE-2026-42014 | gnutls | 3.8.13-r0 |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GHSA-q3v6-hm2v-pw99 | spring-security-core | 6.1.12 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| togglr-backendtogglrVerified publisher | 1.0.0 | 1.0.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.