StackRadar

gradiant/spark:2.4.4-python-alpine container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gradiant/spark

gradiant/spark:2.4.4-python-alpine resolved to 97657d56e927, scanned 14 Sept 2026: 213 findings, 10 critical, 2 on KEV; deployed by 2 charts, among them spark-standalone and spark-standalone.

Radar Score

6,055102912252

213 findings on digest 97657d56e927 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.4.4-python-alpineresolves to97657d56e9272 charts6 days ago1029122526,055

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

213 distinct on this digest

Findings for digest 97657d56e927 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumPYSEC-2023-72pyspark@2.4.43.2.2
MediumGHSA-85cw-hj65-qqv9jackson-databind@2.6.7.12.6.7.3
MediumGHSA-fmmc-742q-jg75jackson-databind@2.6.7.12.6.7.3
MediumGHSA-gwp4-hfv6-p7hwjackson-databind@2.6.7.12.6.7.3
MediumGHSA-xqfj-vm6h-2x34commons-compress@1.8.11.21
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.6.7.12.8.11.5
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.6.7.12.9.10.8
MediumGHSA-gx2c-fvhc-ph4jhadoop-common@2.7.32.10.2
MediumGHSA-5949-rw7g-wx7wjackson-databind@2.6.7.12.6.7.5
MediumGHSA-8wm5-8h9c-47pchadoop-common@2.7.32.10.2
MediumGHSA-qjw2-hr98-qgfhjackson-databind@2.6.7.12.6.7.5
MediumGHSA-wm47-8v5p-wjpjnetty@3.9.9.Finalno fix listed
MediumGHSA-rj7p-rfgp-852xlibthrift@0.9.30.13.0
MediumGHSA-w3f4-3q6j-rh82jackson-databind@2.6.7.12.7.9.5
MediumGHSA-jwp6-cvj8-fw65spark-core_2.11@2.4.4no fix listed
MediumGHSA-p979-4mfw-53vgnetty-all@4.1.17.Final4.1.42.Final
MediumGHSA-p979-4mfw-53vgnetty@3.9.9.Finalno fix listed
MediumGHSA-wjxj-f8rg-99wxlibthrift@0.9.30.9.3-1
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.6.7.12.7.9.4
MediumGHSA-r7pg-v2c8-mfg3avro@1.8.21.11.4
MediumGHSA-f8vc-wfc8-hxqhhadoop-common@2.7.32.10.1
MediumGHSA-rmpj-7c96-mrg8hadoop-common@2.7.32.10.2
MediumGHSA-g2fg-mr77-6vrmlibthrift@0.9.30.14.0
MediumGHSA-9vjp-v76f-g363netty@3.9.9.Finalno fix listed
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.6.7.12.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.6.7.12.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.6.7.12.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.6.7.12.6.7.5
MediumGHSA-89qr-369f-5m5xjackson-databind@2.6.7.12.6.7.5
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.6.7.12.6.7.5
MediumGHSA-vfqx-33qm-g869jackson-databind@2.6.7.12.6.7.5
MediumALPINE-CVE-2020-14422python3@3.7.5-r13.7.7-r1
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.6.7.12.6.7.5
MediumGHSA-58jx-f5rf-qgqfhadoop-yarn-server-common@2.7.32.10.2
MediumALPINE-CVE-2019-14697musl@1.1.22-r21.1.22-r3
MediumGHSA-jjw5-xxj6-pcv5scikit-learn@0.21.30.23.1
MediumGHSA-grg4-wf29-r9vvnetty@3.9.9.Finalno fix listed
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.6.7.12.6.7.3
MediumGHSA-p2v9-g2qv-p635netty@3.9.9.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.6.7.12.6.7.3
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.3.24.v201806059.3.26.v20190403
MediumGHSA-h2f4-v4c4-6wx4jetty-server@9.3.24.v201806059.3.25.v20180904
MediumALPINE-CVE-2019-1551openssl@1.1.1c-r01.1.1d-r2
MediumALPINE-CVE-2019-20367libbsd@0.9.1-r00.9.1-r1
MediumGHSA-p2xq-vcm7-xjj6mesos@1.4.01.4.3
MediumGHSA-fj2m-w3wv-x9prcalcite-core@1.2.0-incubating1.32.0
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.6.7.12.12.6.1
MediumALPINE-CVE-2019-11745nss@3.44-r03.44.3-r0
MediumALPINE-CVE-2021-36159apk-tools@2.10.4-r22.10.7-r0
MediumGHSA-cjw4-2w9r-r8mvpyarrow@0.14.00.15.1

Used by

2 charts
ChartVersionTagContainers
spark-standalonedmwm-bigdataVerified publisher0.1.02.4.4-python-alpine2
spark-standalonegradiant-bigdataVerified publisher0.1.02.4.4-python-alpine2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.