gdrocha/togglr-backend:1.0.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gdrocha/togglr-backend
gdrocha/togglr-backend:1.0.0 resolved to d5ae64e83d4c, scanned 14 Sept 2026: 208 findings, 4 critical, 1 on KEV; deployed by 1 chart, among them togglr-backend.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
208 distinct on this digest
Findings for digest d5ae64e83d4c as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 10.1.55 |
| Low | GHSA-jmp9-x22r-554x | spring-core | no fix listed |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-rv64-5gf8-9qq8 | tomcat-embed-core | 10.1.54 |
| Low | ALPINE-CVE-2026-45186 | expat | 2.8.1-r0 |
| Low | ALPINE-CVE-2026-42011 | gnutls | 3.8.13-r0 |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | ALPINE-CVE-2024-12243 | gnutls | 3.8.12-r0 |
| Low | ALPINE-CVE-2025-32989 | gnutls | 3.8.12-r0 |
| Low | ALPINE-CVE-2026-33630 | c-ares | 1.34.8-r0 |
| Low | GHSA-x4m4-345f-5h5g | tomcat-embed-core | 10.1.54 |
| Low | ALPINE-CVE-2025-6395 | gnutls | 3.8.12-r0 |
| Low | GHSA-jjfh-589g-3hjx | spring-boot-actuator | 3.1.6 |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 10.1.50 |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 10.1.47 |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-6r3c-xf4w-jxjm | spring-web | no fix listed |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | no fix listed |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.5.5-r0 |
| Low | GHSA-42wg-hm62-jcwg | tomcat-embed-core | 10.1.42 |
| Low | ALPINE-CVE-2025-64720 | libpng | 1.6.51-r0 |
| Low | GHSA-2rmj-mq67-h97g | spring-web | 6.0.23 |
| Low | ALPINE-CVE-2025-66293 | libpng | 1.6.53-r0 |
| Low | ALPINE-CVE-2026-42012 | gnutls | 3.8.13-r0 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-2673 | openssl | 3.5.6-r0 |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 10.1.53 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-5545 | curl | 8.14.1-r3 |
| Low | ALPINE-CVE-2026-42015 | gnutls | 3.8.13-r0 |
| Low | GHSA-72hv-8253-57qq | jackson-core | 2.18.6 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2025-14831 | gnutls | 3.8.12-r0 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.5.13 |
| Low | ALPINE-CVE-2026-25210 | expat | 2.7.4-r0 |
| Low | ALPINE-CVE-2025-65018 | libpng | 1.6.51-r0 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-4gc7-5j7h-4qph | spring-context | no fix listed |
| Low | GHSA-4gc7-5j7h-4qph | spring-web | no fix listed |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r12 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.5.5-r0 |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.18.8 |
| Low | GHSA-4773-3jfm-qmx3 | spring-webmvc | no fix listed |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.5.5-r0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| togglr-backendtogglrVerified publisher | 1.0.0 | 1.0.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.