jenkinsci/jenkins:2.67 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of jenkinsci/jenkins

jenkinsci/jenkins:2.67 resolved to a1f33f004659, scanned 14 Sept 2026: 554 findings, 13 critical, 6 on KEV; deployed by 1 chart, among them jenkins.

Radar Score

10,6821322244275

554 findings on digest a1f33f004659 · scanned 14 Sept 2026

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.67resolves to	a1f33f004659	1 chart	6 days ago	1322244275	10,682

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

554 distinct on this digest

Findings for digest a1f33f004659 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-xvxq-hq48-xphmKEV	script-security@1.18.1	1.54
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@2.5.6.SEC03	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@2.5.6.SEC03	5.2.20.RELEASE
Critical	GHSA-6f9g-cxwr-q5jrKEV	jenkins-core@2.67	2.426.3
Critical	GHSA-hhpm-5cp2-hg4xKEV	jenkins-core@2.67	2.138.4
Critical	GHSA-784j-h234-m56x	script-security@1.18.1	1.50
Critical	GHSA-6q78-6xvr-26fg	script-security@1.18.1	1.50
Critical	GHSA-9g4m-ffx6-c29g	jenkins-core@2.67	2.235.4
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.8.3	1.9.4
Critical	GHSA-vv7r-c36w-3prj	commons-fileupload@1.3.1-jenkins-1	1.6.0
Critical	GHSA-64mj-3p92-589v	junit@1.6	1119.1121.vc43d0fc45561
Critical	GHSA-qf38-f2fr-q4x9	jenkins-core@2.67	2.121.2
Critical	GHSA-g2xq-2v27-4rh3	jenkins-core@2.67	2.555.3
High	GHSA-v63g-v339-2673	script-security@1.18.1	1336.vf33a
High	GHSA-7x9j-7223-rg5m	commons-fileupload@1.3.1-jenkins-1	1.3.3
High	GHSA-4wrc-f8pq-fpqp	spring-web@2.5.6.SEC03	6.0.0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@2.5.6.SEC03	no fix listed
High	GHSA-26vr-8j45-3r4w	jetty-server@9.4.5.v20170502	9.4.39
High	GHSA-h856-ffvv-xvr4	remoting@3.7	3206.3208
High	GHSA-h856-ffvv-xvr4	jenkins-core@2.67	2.452.4
High	GHSA-hfrx-6qgj-fp6c	commons-fileupload@1.3.1-jenkins-1	1.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@9.4.5.v20170502	9.4.11.v20180605
High	GHSA-8cmm-qj8g-fcp6	spring-webmvc@2.5.6.SEC03	3.2.8
High	GHSA-fvm3-cfvj-gxqq	commons-fileupload@1.3.1-jenkins-1	1.3.2
High	GHSA-g6hf-f9cq-q7w7	spring-web@2.5.6.SEC03	3.2.5.RELEASE
High	GHSA-ghjx-3jg5-h6r2	mercurial@4.0	4.1.3
High	GHSA-x5jm-rj37-5qh7	script-security@1.18.1	1.51
High	GHSA-vqwg-4v6f-h6x5	matrix-project@1.4.1	1.18.1
High	GHSA-rvg5-f5fj-mxvg	credentials@2.1.2	2.6.1.1
High	GHSA-j8qv-mj4r-6fw4	jenkins-core@2.67	2.121.2
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.8.3	1.9.4
High	GHSA-g8hw-794c-4j9g	spring-core@2.5.6.SEC03	4.3.15
High	GHSA-2f88-5hg8-9x2x	maven-compat@3.1.0	3.8.1
High	GHSA-2f88-5hg8-9x2x	maven-core@3.1.0	3.8.1
High	DLA-2415-1KEV	freetype@2.6.3-3.2	2.6.3-3.2+deb9u2
Medium	DSA-4280-1	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u4
Medium	DSA-4311-1	git@1:2.11.0-3+deb9u1	1:2.11.0-3+deb9u4
Medium	GHSA-6v56-cpg6-3rpx	mercurial@4.0	4.4.1
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.10	1.21
Medium	GHSA-3qmg-c9vc-r47j	mercurial@4.0	4.3
Medium	DLA-2544-1	openldap@2.4.44+dfsg-5	2.4.44+dfsg-5+deb9u7
Medium	DLA-3008-1	openssl@1.1.0f-3	1.1.0l-1~deb9u6
Medium	DSA-4511-1	nghttp2@1.18.1-1	1.18.1-1+deb9u1
Medium	GHSA-crv7-7245-f45f	commons-compress@1.10	1.21
Medium	GHSA-47wc-p5cp-w7pw	jenkins-core@2.67	2.176.4
Medium	DSA-4008-1	wget@1.18-5	1.18-5+deb9u1
Medium	DSA-4065-1	openssl1.0@1.0.2l-2	1.0.2l-2+deb9u2
Medium	GHSA-q446-82vq-w674	jsch@0.1.44-1	0.1.54
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.10	1.21
Medium	DLA-2341-1	inetutils@2:1.9.4-2+b1	2:1.9.4-2+deb9u1

Used by

1 chart

Chart	Version	Tag	Containers
jenkinsjenkins-x	0.10.38	2.67	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.