jhipster/jhipster-registry:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of jhipster/jhipster-registry
jhipster/jhipster-registry:latest resolved to 7184525acd4d, scanned 14 Sept 2026: 407 findings, 5 critical; deployed by 1 chart, among them sistas-chatbot.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
113 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 7184525acd4d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-cx7f-g6mp-7hqm | spring-webmvc | no fix listed |
| Medium | GHSA-3f7h-mf4q-vrm4 | woodstox-core | 6.4.0 |
| Medium | GHSA-j563-grx4-pjpv | xstream | 1.4.20 |
| Medium | UBUNTU-CVE-2024-5535 | openssl | 1.1.1f-1ubuntu2.24+esm5 |
| Medium | GHSA-mmmh-wcxm-2wr4 | spring-security-core | 5.7.5 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-common | 2.9.2 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-core | 2.9.2 |
| Medium | GHSA-rmr5-cpv2-vgjf | xstream | 1.4.19 |
| Medium | UBUNTU-CVE-2022-4304 | openssl | 1.1.1f-1ubuntu2.fips.17 |
| Medium | UBUNTU-CVE-2019-1010022 | glibc | no fix listed |
| Medium | GHSA-3h6f-g5f3-gc4w | spring-security-config | 5.7.10 |
| Medium | UBUNTU-CVE-2021-33574 | glibc | no fix listed |
| Medium | GHSA-7phw-cxx7-q9vq | spring-webmvc | 5.3.26 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 1.1.1f-1ubuntu2.24+esm4 |
| Medium | UBUNTU-CVE-2018-20796 | glibc | no fix listed |
| Medium | GHSA-ccgv-vj62-xf9h | spring-web | 5.3.32 |
| Medium | UBUNTU-CVE-2019-1010023 | glibc | no fix listed |
| Medium | GHSA-w6qf-42m7-vh68 | undertow-core | 2.2.31.Final |
| Medium | UBUNTU-CVE-2023-0215 | openssl | 1.1.1f-1ubuntu2.fips.17 |
| Medium | UBUNTU-CVE-2021-46848 | libtasn1-6 | 4.16.0-2ubuntu0.1+esm1 |
| Medium | UBUNTU-CVE-2023-0464 | openssl | 1.1.1f-1ubuntu2.fips.18 |
| Medium | GHSA-3p86-9955-h393 | org.eclipse.jgit | 5.13.3.202401111512-r |
| Medium | GHSA-7f88-5hhx-67m2 | xnio-api | 3.8.14.Final |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | GHSA-c4q5-6c82-3qpw | spring-security-web | 5.7.13 |
| Medium | UBUNTU-CVE-2017-11164 | pcre3 | no fix listed |
| Medium | UBUNTU-CVE-2024-4741 | openssl | no fix listed |
| Medium | GHSA-xpp6-8r3j-ww43 | undertow-core | 2.2.34.Final |
| Medium | GHSA-j382-5jj3-vw4j | undertow-core | 2.2.39.Final |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.13.4.2 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.13.4 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | GHSA-9623-mqmm-5rcf | undertow-core | 2.2.36.Final |
| Medium | UBUNTU-CVE-2026-19931 | curl | no fix listed |
| Medium | GHSA-g5h3-w546-pj7f | spring-boot-actuator-autoconfigure | 2.7.11 |
| Medium | UBUNTU-CVE-2021-33560 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 |
| Medium | GHSA-95h4-w6j8-2rp8 | undertow-core | 2.2.38.Final |
| Medium | UBUNTU-CVE-2023-3446 | openssl | 1.1.1f-1ubuntu2.fips.20 |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | GHSA-f8cc-g7j8-xxpm | xstream | 1.4.20 |
| Medium | UBUNTU-CVE-2023-31486 | perl | no fix listed |
| Medium | UBUNTU-CVE-2018-5709 | krb5 | no fix listed |
| Medium | UBUNTU-CVE-2024-28757 | expat | no fix listed |
| Medium | GHSA-hfq9-hggm-c56q | xstream | 1.4.21 |
| Medium | GHSA-3qwq-q9vm-5j42 | spring-cloud-config-server | no fix listed |
| Medium | UBUNTU-CVE-2023-52425 | expat | no fix listed |
| Medium | GHSA-m4mm-pg93-fv78 | undertow-core | 2.2.24.Final |
| Medium | UBUNTU-CVE-2011-10043 | perl | no fix listed |
| Medium | GHSA-9442-gm4v-r222 | undertow-core | 2.2.33.Final |
| Medium | UBUNTU-CVE-2022-2097 | openssl | 1.1.1f-1ubuntu2.fips.16 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sistas-chatbotsistas-chatbot | 5.0.2 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.