StackRadar

gradiant/hive:2.3.2-postgresql-metastore container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gradiant/hive

gradiant/hive:2.3.2-postgresql-metastore resolved to aae4f8a21f8b, scanned 14 Sept 2026: 283 findings, 10 critical, 2 on KEV; deployed by 2 charts, among them hive and hive.

Radar Score

6,8821027142104

283 findings on digest aae4f8a21f8b · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.3.2-postgresql-metastoreresolves toaae4f8a21f8b2 charts8 days ago10271421046,882

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

142 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest aae4f8a21f8b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.2.32.6.7.5
MediumGHSA-58jx-f5rf-qgqfhadoop-yarn-server-common@2.7.42.10.2
MediumGHSA-grg4-wf29-r9vvnetty@3.6.2.Finalno fix listed
MediumGHSA-wfcc-pff6-rgc5jetty-server@9.2.5.v201411129.2.22.v20170606
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.2.32.6.7.3
MediumGHSA-p2v9-g2qv-p635netty@3.6.2.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.2.32.6.7.3
MediumGHSA-xfv3-rrfm-f2rvnetty@3.6.2.Final3.9.8.Final
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.2.5.v201411129.2.27.v20190403
MediumGHSA-fj2m-w3wv-x9prcalcite-core@1.10.01.32.0
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.2.32.12.6.1
MediumGHSA-2hw2-62cp-p9p7zookeeper@3.4.6-tests3.4.14
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.2.32.9.10.4
MediumDLA-2009-1tiff@4.0.3-12.3+deb8u54.0.3-12.3+deb8u10
MediumGHSA-3832-9276-x7gfcommons-httpclient@3.0.1no fix listed
MediumGHSA-cfh5-3ghh-wfjxhttpclient@4.2.54.3.5
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@7.6.0.v201201279.4.33.v20201020
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.2.54.5.13
MediumGHSA-vx85-mj8c-4qm6libthrift@0.9.30.12.0
MediumGHSA-7286-pgfv-vxvhzookeeper@3.4.6-tests3.7.2
MediumGHSA-rrfq-g5fq-fc9chive-exec@2.3.22.3.4
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.6.52.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.6.52.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@2.5.03.25.5
MediumGHSA-3vrc-rrpw-r5pwjava-xmlbuilder@0.41.2
MediumGHSA-5m48-vr54-vmh3jersey-core@1.91.13
MediumDLA-1917-1curl@7.38.0-4+deb8u97.38.0-4+deb8u16
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.42.7
MediumGHSA-mvr2-9pj6-7w5jguava@11.0.224.1.1-android
MediumGHSA-v7wg-cpwc-24m4postgresql@9.4.1208.jre742.2.25
MediumGHSA-f256-j965-7f32netty@3.6.2.Finalno fix listed
MediumDLA-1833-1bzip2@1.0.6-7+b31.0.6-7+deb8u1
MediumDLA-1557-1tiff@4.0.3-12.3+deb8u54.0.3-12.3+deb8u7
MediumDLA-1637-1apt@1.0.9.8.41.0.9.8.5
MediumGHSA-xc67-hjx6-cgg6jetty-server@9.2.5.v201411129.2.28.v20190418
MediumGHSA-hrmr-f5m6-m9pqcommons-compress@1.91.18
MediumDLA-1672-1curl@7.38.0-4+deb8u97.38.0-4+deb8u14
MediumGHSA-vp98-w2p3-mv35log4j@1.2.172.0
MediumDSA-4140-1libvorbis@1.3.4-21.3.4-2+deb8u1
MediumGHSA-h24p-qwf4-84q8hadoop-common@2.7.42.8.1
MediumDLA-1568-1curl@7.38.0-4+deb8u97.38.0-4+deb8u13
MediumGHSA-rhrv-645h-fjfhavro@1.7.71.11.3
MediumDLA-1601-1perl@5.20.2-3+deb8u95.20.2-3+deb8u12
MediumGHSA-r38f-c4h4-hqq2postgresql@9.4.1208.jre742.2.26
MediumDLA-1730-3libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u4
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.0.51.1.10.1
MediumDSA-4136-1curl@7.38.0-4+deb8u97.38.0-4+deb8u10
MediumGHSA-wx5j-54mm-rqqqnetty@3.6.2.Finalno fix listed
MediumGHSA-qxp4-27vx-xmm3jetty-server@7.6.0.v201201278.1.0.RC4
MediumGHSA-7vpq-g998-qpv7netty@3.6.2.Final3.6.9.Final

Used by

2 charts
ChartVersionTagContainers
hivedmwm-bigdataVerified publisher0.1.62.3.2-postgresql-metastore1
hivegradiant-bigdataVerified publisher0.1.62.3.2-postgresql-metastore1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.