graviteeio/apim-gateway:4.12.20-debian container image
Docker HubScanned 22 Sept 2026
Deployed by 2 of 17,828 indexed charts (latest versions) at this tag.Docker Hub all tags of graviteeio/apim-gateway
graviteeio/apim-gateway:4.12.20-debian resolved to 8f1a14449381, scanned 22 Sept 2026: 196 findings, 0 critical; deployed by 2 charts, among them apim3 and apim.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
196 distinct on this digest
Findings for digest 8f1a14449381 as scanned on 22 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 22 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.18.8 |
| Low | DEBIAN-CVE-2026-77117 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-80489 | glibc | no fix listed |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.1.135.Final |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | GHSA-c69g-56f8-xwqj | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-hjcp-jmpx-g3qm | httpclient5 | 5.6.3 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | GHSA-xvr9-35cr-46v9 | mariadb-java-client | 3.5.9 |
| Low | GHSA-5m4m-73w9-8433 | spring-data-commons | no fix listed |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.2.17.Final |
| Low | GHSA-9fxm-vc8v-hj55 | jackson-databind | 2.21.4 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.21.4 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.2.16.Final |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | GHSA-5vpf-xvv7-c8vh | spring-data-commons | no fix listed |
| Low | DEBIAN-CVE-2011-3374 | apt | no fix listed |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GHSA-5hh8-q8hv-fr38 | jackson-databind | 2.21.4 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GHSA-hc43-m36c-8v33 | spring-data-mongodb | no fix listed |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | 6.2.19 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-76957 | expat | no fix listed |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.2.16.Final |
| Low | DEBIAN-CVE-2026-19542 | glibc | no fix listed |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-56109 | alsa-lib | no fix listed |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.2.16.Final |
| Low | GHSA-g9jj-cgmh-9f38 | mariadb-java-client | 3.5.9 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-8674 | glibc | no fix listed |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | GHSA-qxvw-fvwx-5cp7 | mariadb-java-client | 3.5.9 |
| Low | DEBIAN-CVE-2026-27171 | zlib | no fix listed |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | DEBIAN-CVE-2026-11850 | krb5 | no fix listed |
Used by
2 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| apim3graviteeioVerified publisher | 4.12.20 | 4.12.20-debian | 1 |
| apimgraviteeioVerified publisher | 4.12.20 | 4.12.20-debian | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.