StackRadar

hickey/puppet_forge:1.10.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of hickey/puppet_forge

hickey/puppet_forge:1.10.0 resolved to c1148a09ef20, scanned 14 Sept 2026: 244 findings, 1 critical; deployed by 1 chart, among them puppet-forge.

Radar Score

4,08613105135

244 findings on digest c1148a09ef20 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.10.0resolves toc1148a09ef201 chart6 days ago131051354,086

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

135 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest c1148a09ef20 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-qv7j-4883-hwh7rack@1.5.52.2.23
LowGHSA-vgpv-f759-9wx3rack@1.5.52.2.23
LowGHSA-7mqq-6cf9-v2qprack@1.5.52.2.23
LowGHSA-whrj-4476-wvmprack@1.5.52.2.22
LowDLA-1623-1tar@1.27.1-2+deb8u11.27.1-2+deb8u2
LowDLA-1931-1libgcrypt20@1.6.3-2+deb8u41.6.3-2+deb8u6
LowDLA-2002-1libice@2:1.0.9-1+b12:1.0.9-1+deb8u1
LowGHSA-q4qf-9j86-f5mhrack@1.5.52.2.23
LowDLA-1726-1bash@4.3-11+deb8u14.3-11+deb8u2
LowDLA-1711-1systemd@215-17+deb8u7215-17+deb8u11
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.0.51.3.7
LowGHSA-vpfw-47h7-xj4grack@1.5.52.2.14
LowGHSA-q2ww-5357-x388rack@1.5.52.2.23
LowGHSA-54rr-7fvw-6x8frack@1.5.52.0.9.4
LowGHSA-j6gc-792m-qgm2activesupport@4.2.106.1.7.1
LowGHSA-xj5v-6v4g-jfw6rack@1.5.52.2.8.1
LowDLA-1417-1ca-certificates@20141019+deb8u320141019+deb8u4
LowDLA-1500-2openssh@1:6.7p1-5+deb8u31:6.7p1-5+deb8u7
LowDLA-1563-1tzdata@2017b-0+deb8u12018g-0+deb8u1
LowDLA-1606-1gcc-4.9@4.9.2-104.9.2-10+deb8u2
LowDLA-1625-1tzdata@2017b-0+deb8u12018i-0+deb8u1
LowDLA-1628-2jasper@1.900.1-debian1-2.4+deb8u31.900.1-debian1-2.4+deb8u6
LowDLA-1642-1postgresql-9.4@9.4.13-0+deb8u19.4.20-0+deb8u1
LowDLA-1698-2file@1:5.22+15-2+deb8u31:5.22+15-2+deb8u7
LowDLA-1730-2libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u3
LowDLA-1744-1tzdata@2017b-0+deb8u12019a-0+deb8u1
LowDLA-1762-2systemd@215-17+deb8u7215-17+deb8u13
LowDLA-1777-2jquery@1.7.2+dfsg-3.21.7.2+dfsg-3.2+deb8u7
LowDLA-1784-1postgresql-9.4@9.4.13-0+deb8u19.4.22-0+deb8u1
LowDLA-1833-2bzip2@1.0.6-7+b31.0.6-7+deb8u2
LowDLA-1957-1tzdata@2017b-0+deb8u12019c-0+deb8u1
LowDLA-2006-1libxdmcp@1:1.1.1-1+b11:1.1.1-1+deb8u1
LowDLA-2043-2gdk-pixbuf@2.31.1-2+deb8u62.31.1-2+deb8u9
LowDSA-4117-1gcc-4.9@4.9.2-104.9.2-10+deb8u1
LowGHSA-6wx8-w4f5-wwcrconcurrent-ruby@1.0.51.3.7

Used by

1 chart
ChartVersionTagContainers
puppet-forgecloudnativeapp0.1.81.10.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.