StackRadar

library/docker:28.3.3-dind container image

Docker Hub

Scanned 28 Sept 2026

Deployed by 1 of 17,926 indexed charts (latest versions) at this tag.Docker Hub all tags of library/docker

library/docker:28.3.3-dind resolved to a56b3bdde893, scanned 28 Sept 2026: 225 findings, 1 critical; deployed by 1 chart, among them litefunctions.

Radar Score

2,2491043181

225 findings on digest a56b3bdde893 · scanned 28 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
28.3.3-dindresolves toa56b3bdde8931 charttoday10431812,249

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

225 distinct on this digest

Findings for digest a56b3bdde893 as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.38.00.52.0
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.38.00.52.0
LowALPINE-CVE-2025-69419openssl@3.5.2-r03.5.5-r0
LowALPINE-CVE-2026-93990expat@2.7.1-r02.8.5-r0
LowALPINE-CVE-2026-76641expat@2.7.1-r02.8.4-r0
LowALPINE-CVE-2026-42766openssl@3.5.2-r03.5.7-r0
LowGHSA-4vrq-3vrq-g6gggithub.com/moby/buildkit@v0.23.0-rc1.0.20250806140246-955c2b2f7d010.28.1
LowGHSA-cgrx-mc8f-2prmgithub.com/opencontainers/selinux@v1.12.01.13.0
LowGHSA-33vj-92qq-66hcgithub.com/containerd/containerd/v2@v2.1.42.1.9
LowALPINE-CVE-2026-45186expat@2.7.1-r02.8.1-r0
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowALPINE-CVE-2025-15468openssl@3.5.2-r03.5.5-r0
LowALPINE-CVE-2026-75803openssl@3.5.2-r03.5.8-r0
LowGHSA-p436-gjf2-799pgithub.com/docker/cli@v28.3.3+incompatible29.2.0
LowGHSA-pxq6-2prw-chj9github.com/docker/docker@v28.3.3no fix listed
LowGHSA-hfg8-hc9c-6c3hgithub.com/moby/go-archive@v0.1.00.3.0
LowGO-2026-4341stdlib@go1.24.51.24.12
LowALPINE-CVE-2026-5545curl@8.14.1-r18.14.1-r3
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.38.00.52.0
LowALPINE-CVE-2026-2673openssl@3.5.2-r03.5.6-r0
LowALPINE-CVE-2026-76642util-linux@2.41-r92.41.6-r0
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.39.00.55.0
LowALPINE-CVE-2026-76956expat@2.7.1-r02.8.4-r0
LowGHSA-pg57-6jwg-q645github.com/containerd/containerd/v2@v2.1.42.2.9
LowALPINE-CVE-2026-63074openssl@3.5.2-r03.5.8-r0
LowGHSA-xhf5-7wjv-pqxpgithub.com/containerd/containerd/v2@v2.1.42.1.9
LowALPINE-CVE-2026-25210expat@2.7.1-r02.7.4-r0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.38.00.52.0
LowALPINE-CVE-2025-66199openssl@3.5.2-r03.5.5-r0
LowALPINE-CVE-2026-78408util-linux@2.41-r92.41.6-r1
LowALPINE-CVE-2026-40200musl@1.2.5-r101.2.5-r12
LowALPINE-CVE-2025-62408c-ares@1.34.5-r01.34.6-r0
LowALPINE-CVE-2026-42767openssl@3.5.2-r03.5.7-r0
LowALPINE-CVE-2026-22796openssl@3.5.2-r03.5.5-r0
LowALPINE-CVE-2026-34743xz@5.8.1-r05.8.3-r0
LowGHSA-jpcc-p29g-p8mqgithub.com/containerd/containerd/v2@v2.1.42.1.9
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.38.00.45.0
LowGHSA-hfvc-g4fc-pqhxgo.opentelemetry.io/otel/sdk@v1.36.01.43.0
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.72.21.83.1
LowGHSA-fqw6-gf59-qr4wgithub.com/containerd/containerd/v2@v2.1.42.2.4
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.38.00.52.0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.38.00.52.0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.38.00.45.0
LowALPINE-CVE-2025-10148curl@8.14.1-r18.14.1-r2
LowALPINE-CVE-2026-34181openssl@3.5.2-r03.5.7-r0
LowGHSA-7236-3392-c5c6github.com/moby/buildkit@v0.23.0-rc1.0.20250806140246-955c2b2f7d010.31.1
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.72.21.82.1
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.32.01.65.0
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.31.7.8
LowGHSA-rgh6-rfwx-v388github.com/containerd/containerd/v2@v2.1.42.1.9

Used by

1 chart
ChartVersionTagContainers
litefunctionslitefunctions0.1.128.3.3-dind1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 28 Sept 2026 · advisories as of 28 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.