jenkins/jenkins:lts container image
Docker HubScanned 14 Sept 2026
Deployed by 11 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of jenkins/jenkins
jenkins/jenkins:lts resolved to c1e4c349365f, scanned 14 Sept 2026: 242 findings, 0 critical; deployed by 11 charts, among them jenkins, Jenkins and jenkins.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
242 distinct on this digest
Findings for digest c1e4c349365f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | DEBIAN-CVE-2026-60002 | openssh | no fix listed |
| Low | DEBIAN-CVE-2026-80230 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-66035 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.46-1~deb13u2 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-60000 | openssh | no fix listed |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2026-82208 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-42497 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-41992 | gzip | 1.13-1+deb13u1 |
| Low | DEBIAN-CVE-2026-12064 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-8932 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-8286 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-58051 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2026-48959 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-5928 | glibc | 2.41-12+deb13u4 |
| Low | DEBIAN-CVE-2026-6791 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2018-1000021 | git | no fix listed |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |
| Low | DEBIAN-CVE-2021-45346 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DEBIAN-CVE-2025-70873 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-57432 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2024-26458 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2026-76956 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-9080 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-48962 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-9545 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | 3.46.1-7+deb13u2 |
| Low | DEBIAN-CVE-2026-11824 | sqlite3 | 3.46.1-7+deb13u2 |
| Low | DEBIAN-CVE-2026-48961 | perl | 5.40.1-6+deb13u1 |
| Low | GHSA-72hv-8253-57qq | jackson-core | 2.21.1 |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | GHSA-rcqc-6cw3-h962 | jackson-databind | 3.1.4 |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 3.1.5 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | DEBIAN-CVE-2026-7017 | perl | 5.40.1-6+deb13u1 |
Used by
11 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| jenkinsedu | 2.7.1 | lts | 2 |
| JenkinsprasoonjenkinsVerified publisher | 0.1.0 | lts | 1 |
| jenkinsaditisingh-jenkins | 1.0.0 | lts | 1 |
| jenkinsfatihtepe-jenkins | 1.0.0 | lts | 1 |
| ibm-microclimateibm-charts | 0.1.0 | lts | 2 |
| jx-app-jenkinsjenkins-x | 0.0.15 | lts | 2 |
| jenkinskallakruparaju-jenkins | 1.0.0 | lts | 1 |
| jenkinsleechistest | 2.7.1 | lts | 2 |
| jenkinsstakaterVerified publisher | 0.21.0 | lts | 2 |
| jenkinstnh | 2.7.1 | lts | 2 |
| jenkinswebencryptor | 1.9.18 | lts | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.