StackRadar

library/elasticsearch:2.4.6 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/elasticsearch

library/elasticsearch:2.4.6 resolved to 41ed3a1a16b6, scanned 14 Sept 2026: 182 findings, 5 critical, 1 on KEV; deployed by 2 charts, among them elasticsearch2 and elasticsearch2.

Radar Score

3,3575572100

182 findings on digest 41ed3a1a16b6 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.4.6resolves to41ed3a1a16b61 chart8 days ago55721003,357

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

100 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 41ed3a1a16b6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-c77j-p484-h84melasticsearch@2.4.66.8.12
LowDLA-2976-1gzip@1.6-5+b11.6-5+deb9u1
LowDLA-2977-1xz-utils@5.2.2-1.2+b15.2.2-1.2+deb9u1
LowDSA-4621-1openjdk-8@8u181-b13-1~deb9u18u242-b08-1~deb9u1
LowDLA-2904-1expat@2.2.0-2+deb9u12.2.0-2+deb9u4
LowDLA-2378-1openssl1.0@1.0.2l-2+deb9u31.0.2u-1~deb9u2
LowDLA-2828-1libvorbis@1.3.5-4+deb9u21.3.5-4+deb9u3
LowDLA-2773-1curl@7.52.1-5+deb9u67.52.1-5+deb9u16
LowDSA-4666-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u4
LowDLA-2437-1krb5@1.15-1+deb9u11.15-1+deb9u2
LowDLA-2372-1libproxy@0.4.14-20.4.14-2+deb9u1
LowDSA-4485-1openjdk-8@8u181-b13-1~deb9u18u222-b10-1~deb9u1
LowDLA-2325-1openjdk-8@8u181-b13-1~deb9u18u265-b01-0+deb9u1
LowDLA-2737-1openjdk-8@8u181-b13-1~deb9u18u302-b08-1~deb9u1
LowDLA-2514-1flac@1.3.2-11.3.2-2+deb9u1
LowDLA-2931-1cyrus-sasl2@2.1.27~101-g0780600+dfsg-32.1.27~101-g0780600+dfsg-3+deb9u2
LowDLA-3044-1glib2.0@2.50.3-22.50.3-2+deb9u3
LowDLA-3006-1openjdk-8@8u181-b13-1~deb9u18u332-ga-1~deb9u1
LowDLA-3058-1libsndfile@1.0.27-31.0.27-3+deb9u3
LowDSA-4539-1openssl@1.1.0f-3+deb9u21.1.0l-1~deb9u1
LowDSA-4540-1openssl1.0@1.0.2l-2+deb9u31.0.2t-1~deb9u1
LowDLA-2382-1curl@7.52.1-5+deb9u67.52.1-5+deb9u12
LowDLA-2412-1openjdk-8@8u181-b13-1~deb9u18u272-b10-0+deb9u1
LowDLA-3012-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u7
LowDSA-4548-1openjdk-8@8u181-b13-1~deb9u18u232-b09-1~deb9u1
LowDLA-2837-1gmp@2:6.1.2+dfsg-12:6.1.2+dfsg-1+deb9u1
LowDLA-2802-1elfutils@0.168-10.168-1+deb9u1
LowDLA-2340-2sqlite3@3.16.2-5+deb9u13.16.2-5+deb9u3
LowDLA-2634-1openjdk-8@8u181-b13-1~deb9u18u292-b10-0+deb9u1
LowDLA-2450-1libproxy@0.4.14-20.4.14-2+deb9u2
LowDLA-2302-1libjpeg-turbo@1:1.5.1-21:1.5.1-2+deb9u1
LowDSA-4410-1openjdk-8@8u181-b13-1~deb9u18u212-b01-1~deb9u1
LowDLA-2513-1p11-kit@0.23.3-20.23.3-2+deb9u1
LowDLA-2722-1libsndfile@1.0.27-31.0.27-3+deb9u2
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.151.31
LowDLA-3022-1dpkg@1.18.251.18.26
LowGHSA-jqm6-m3j3-8gg9elasticsearch@2.4.66.8.2
LowDLA-2657-1lz4@0.0~r131-2+b10.0~r131-2+deb9u1
LowGHSA-mjpc-qx7h-r8c9elasticsearch@2.4.65.6.9
LowDSA-4367-1systemd@232-25+deb9u4232-25+deb9u7
LowDLA-2481-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u6
LowDLA-2566-1libbsd@0.8.3-10.8.3-1+deb9u1
LowGHSA-rcjj-h6gh-jf3rgroovy@2.4.6-indy2.4.21
LowDLA-2760-1nettle@3.3-1+b23.3-1+deb9u1
LowGHSA-62ww-4p3p-7fhjelasticsearch@2.4.66.8.15
LowDSA-4646-1icu@57.1-6+deb9u257.1-6+deb9u4
LowGHSA-mm3m-5497-xgggelasticsearch@2.4.67.17.25
LowDLA-2596-1shadow@1:4.4-4.11:4.4-4.1+deb9u1
LowGHSA-jgx4-7v3v-vwfmelasticsearch@2.4.67.17.21
LowGHSA-hr65-qq6p-87r4elasticsearch@2.4.66.8.15

Used by

2 charts
ChartVersionTagContainers
elasticsearch2ncsaVerified publisher0.2.22.4.61
elasticsearch2ygqygq2Verified publisher1.0.02.4.6unmeasured: HTTP 429 resolving manifest2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.