library/elasticsearch:2.4.6 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/elasticsearch
library/elasticsearch:2.4.6 resolved to 41ed3a1a16b6, scanned 14 Sept 2026: 182 findings, 5 critical, 1 on KEV; deployed by 2 charts, among them elasticsearch2 and elasticsearch2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
182 distinct on this digest
Findings for digest 41ed3a1a16b6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-2qrg-x229-3v8q | log4j | no fix listed |
| Critical | GHSA-65fg-84f6-3jq3 | log4j | no fix listed |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-f7vh-qwp3-x37m | log4j | no fix listed |
| Critical | GHSA-w9p3-5cr8-m3jj | log4j | no fix listed |
| High | GHSA-fp5r-v3w9-4333 | log4j | no fix listed |
| High | GHSA-xphj-m9cc-8fmq | groovy | 2.4.8 |
| High | GHSA-rvwf-54qp-4r6v | snakeyaml | 1.26 |
| High | GHSA-cqqj-4p63-rrmm | netty | no fix listed |
| High | DLA-2415-1KEV | freetype | 2.6.3-3.2+deb9u2 |
| Medium | DLA-2544-1 | openldap | 2.4.44+dfsg-5+deb9u7 |
| Medium | DLA-3008-1 | openssl | 1.1.0l-1~deb9u6 |
| Medium | DSA-4511-1 | nghttp2 | 1.18.1-1+deb9u1 |
| Medium | DLA-2952-1 | openssl | 1.1.0l-1~deb9u5 |
| Medium | DLA-2953-1 | openssl1.0 | 1.0.2u-1~deb9u7 |
| Medium | DLA-3017-1 | openldap | 2.4.44+dfsg-5+deb9u9 |
| Medium | DLA-2574-1 | openldap | 2.4.44+dfsg-5+deb9u8 |
| Medium | GHSA-wm47-8v5p-wjpj | netty | no fix listed |
| Medium | GHSA-p979-4mfw-53vg | netty | no fix listed |
| Medium | DLA-2968-1 | zlib | 1:1.2.8.dfsg-5+deb9u1 |
| Medium | DLA-2563-1 | openssl | 1.1.0l-1~deb9u3 |
| Medium | DLA-2565-1 | openssl1.0 | 1.0.2u-1~deb9u4 |
| Medium | DLA-2766-1 | openssl | 1.1.0l-1~deb9u4 |
| Medium | DLA-2774-1 | openssl1.0 | 1.0.2u-1~deb9u6 |
| Medium | DSA-4348-1 | openssl | 1.1.0j-1~deb9u1 |
| Medium | DSA-4355-1 | openssl1.0 | 1.0.2q-1~deb9u1 |
| Medium | GHSA-9vjp-v76f-g363 | netty | no fix listed |
| Medium | DLA-2388-1 | nss | 2:3.26.2-1.1+deb9u2 |
| Medium | GHSA-grg4-wf29-r9vv | netty | no fix listed |
| Medium | DSA-4453-1 | openjdk-8 | 8u212-b03-2~deb9u1 |
| Medium | DLA-2935-1 | expat | 2.2.0-2+deb9u5 |
| Medium | GHSA-p2v9-g2qv-p635 | netty | no fix listed |
| Medium | DSA-4670-1 | tiff | 4.0.8-2+deb9u5 |
| Medium | GHSA-xmc8-26q4-qjhx | jackson-dataformat-cbor | 2.11.4 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | DSA-4633-1 | curl | 7.52.1-5+deb9u10 |
| Medium | GHSA-fj32-6v7m-57pg | elasticsearch | 5.6.15 |
| Medium | DLA-2836-1 | nss | 2:3.26.2-1.1+deb9u3 |
| Medium | DSA-4400-1 | openssl1.0 | 1.0.2r-1~deb9u1 |
| Medium | GHSA-mvr2-9pj6-7w5j | guava | 24.1.1-android |
| Medium | DLA-2814-1 | openjdk-8 | 8u312-b07-1~deb9u1 |
| Medium | GHSA-f256-j965-7f32 | netty | no fix listed |
| Medium | DSA-4349-1 | tiff | 4.0.8-2+deb9u4 |
| Medium | DSA-4371-1 | apt | 1.4.9 |
| Medium | DSA-4594-1 | openssl1.0 | 1.0.2u-1~deb9u1 |
| Medium | DSA-4386-1 | curl | 7.52.1-5+deb9u9 |
| Medium | GHSA-vp98-w2p3-mv35 | log4j | 2.0 |
| Medium | DSA-4347-1 | perl | 5.24.1-3+deb9u5 |
| Medium | DLA-2848-1 | libssh2 | 1.7.0-1+deb9u2 |
| Medium | GHSA-wx5j-54mm-rqqq | netty | no fix listed |
Used by
2 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| elasticsearch2ncsaVerified publisher | 0.2.2 | 2.4.6 | 1 |
| elasticsearch2ygqygq2Verified publisher | 1.0.0 | 2.4.6unmeasured: HTTP 429 resolving manifest | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.