graphiteapp/graphite-statsd:1.1.7-6 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of graphiteapp/graphite-statsd

graphiteapp/graphite-statsd:1.1.7-6 resolved to 04a0037cc2ae, scanned 14 Sept 2026: 545 findings, 4 critical, 2 on KEV; deployed by 1 chart, among them netris-controller.

Radar Score

10,104435219287

545 findings on digest 04a0037cc2ae · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.1.7-6resolves to	04a0037cc2ae	1 chart	8 days ago	435219287	10,104

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

545 distinct on this digest

Findings for digest 04a0037cc2ae as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.5	no fix listed
Medium	GHSA-xvch-5gv4-984h	minimist@1.2.0	1.2.6
Medium	GHSA-r628-mhmh-qjhw	tar@4.4.13	4.4.15
Medium	ALPINE-CVE-2022-23852	expat@2.2.9-r1	2.2.10-r1
Medium	GHSA-765h-qjxv-5f44	handlebars@4.1.2	4.7.7
Medium	ALPINE-CVE-2020-8285	curl@7.69.1-r0	7.69.1-r3
Medium	ALPINE-CVE-2020-8174	nodejs@12.17.0-r0	12.18.3-r0
Medium	ALPINE-CVE-2020-15180	mariadb@10.4.13-r0	10.4.15-r0
Medium	GHSA-cf4h-3jhx-xvhq	underscore@1.4.4	1.12.1
Medium	GHSA-896r-f27r-55mw	json-schema@0.2.3	0.4.0
Medium	ALPINE-CVE-2021-22918	nodejs@12.17.0-r0	12.22.2-r0
Medium	ALPINE-CVE-2022-1271	xz@5.2.5-r0	5.2.5-r1
Medium	ALPINE-CVE-2021-44531	nodejs@12.17.0-r0	12.22.10-r0
Medium	ALPINE-CVE-2022-22823	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-22824	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2021-21309	redis@5.0.9-r0	5.0.11-r0
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.0.0-20210520170846-37e1c6afe023
Medium	ALPINE-CVE-2021-3520	lz4@1.9.2-r0	1.9.2-r1
Medium	ALPINE-CVE-2021-45960	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-24407	cyrus-sasl@2.1.27-r6	2.1.28-r0
Medium	GHSA-w24h-v9qh-8gxj	django@2.2.13	2.2.28
Medium	ALPINE-CVE-2019-20907	python3@3.8.3-r0	3.8.5-r0
Medium	ALPINE-CVE-2020-14422	python3@3.8.3-r0	3.8.4-r0
Medium	ALPINE-CVE-2022-27404	freetype@2.10.2-r0	2.10.4-r1
Medium	ALPINE-CVE-2022-23308	libxml2@2.9.10-r4	2.9.13-r0
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v0.9.1	1.11.1
Medium	ALPINE-CVE-2021-3518	libxml2@2.9.10-r4	2.9.10-r6
Medium	ALPINE-CVE-2020-8172	nodejs@12.17.0-r0	12.18.3-r0
Medium	ALPINE-CVE-2022-28391	busybox@1.31.1-r16	1.31.1-r22
Medium	GHSA-rxjp-mfm9-w4wr	django@2.2.13	2.2.21
Medium	ALPINE-CVE-2020-11080	nodejs@12.17.0-r0	12.18.3-r0
Medium	GHSA-p99v-5w3c-jqq9	django@2.2.13	2.2.24
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.1.2-0.20180830160456-5669497fd644	1.3.2
Medium	ALPINE-CVE-2021-39537	ncurses@6.2_p20200523-r0	6.2_p20200523-r1
Medium	ALPINE-CVE-2021-22939	nodejs@12.17.0-r0	12.22.5-r0
Medium	ALPINE-CVE-2020-8201	nodejs@12.17.0-r0	12.18.4-r0
Medium	GHSA-p6mc-m468-83gw	lodash@4.17.15	4.17.19
Medium	ALPINE-CVE-2021-37701	nodejs@12.17.0-r0	12.22.6-r0
Medium	GHSA-vx3p-948g-6vhq	ssri@6.0.1	6.0.2
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.5-r1	2.10.7-r0
Medium	ALPINE-CVE-2022-25314	expat@2.2.9-r1	2.2.10-r2
Medium	ALPINE-CVE-2020-8286	curl@7.69.1-r0	7.69.1-r3
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.7.0
Medium	ALPINE-CVE-2021-22946	curl@7.69.1-r0	7.79.0-r0
Medium	ALPINE-CVE-2022-22826	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-22827	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2021-32762	redis@5.0.9-r0	5.0.14-r0
Medium	GHSA-9r2w-394v-53qc	tar@4.4.13	4.4.16
Medium	ALPINE-CVE-2021-46143	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-22825	expat@2.2.9-r1	2.2.10-r0

Used by

1 chart

Chart	Version	Tag	Containers
netris-controllernetrisai	2.8.2	1.1.7-6	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.