StackRadar

library/elasticsearch:2.4.6 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/elasticsearch

library/elasticsearch:2.4.6 resolved to 41ed3a1a16b6, scanned 14 Sept 2026: 182 findings, 5 critical, 1 on KEV; deployed by 2 charts, among them elasticsearch2 and elasticsearch2.

Radar Score

3,3575572100

182 findings on digest 41ed3a1a16b6 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.4.6resolves to41ed3a1a16b61 chart8 days ago55721003,357

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

72 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 41ed3a1a16b6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDLA-2544-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u7
MediumDLA-3008-1openssl@1.1.0f-3+deb9u21.1.0l-1~deb9u6
MediumDSA-4511-1nghttp2@1.18.1-11.18.1-1+deb9u1
MediumDLA-2952-1openssl@1.1.0f-3+deb9u21.1.0l-1~deb9u5
MediumDLA-2953-1openssl1.0@1.0.2l-2+deb9u31.0.2u-1~deb9u7
MediumDLA-3017-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u9
MediumDLA-2574-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u8
MediumGHSA-wm47-8v5p-wjpjnetty@3.10.6.Finalno fix listed
MediumGHSA-p979-4mfw-53vgnetty@3.10.6.Finalno fix listed
MediumDLA-2968-1zlib@1:1.2.8.dfsg-51:1.2.8.dfsg-5+deb9u1
MediumDLA-2563-1openssl@1.1.0f-3+deb9u21.1.0l-1~deb9u3
MediumDLA-2565-1openssl1.0@1.0.2l-2+deb9u31.0.2u-1~deb9u4
MediumDLA-2766-1openssl@1.1.0f-3+deb9u21.1.0l-1~deb9u4
MediumDLA-2774-1openssl1.0@1.0.2l-2+deb9u31.0.2u-1~deb9u6
MediumDSA-4348-1openssl@1.1.0f-3+deb9u21.1.0j-1~deb9u1
MediumDSA-4355-1openssl1.0@1.0.2l-2+deb9u31.0.2q-1~deb9u1
MediumGHSA-9vjp-v76f-g363netty@3.10.6.Finalno fix listed
MediumDLA-2388-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u2
MediumGHSA-grg4-wf29-r9vvnetty@3.10.6.Finalno fix listed
MediumDSA-4453-1openjdk-8@8u181-b13-1~deb9u18u212-b03-2~deb9u1
MediumDLA-2935-1expat@2.2.0-2+deb9u12.2.0-2+deb9u5
MediumGHSA-p2v9-g2qv-p635netty@3.10.6.Finalno fix listed
MediumDSA-4670-1tiff@4.0.8-2+deb9u24.0.8-2+deb9u5
MediumGHSA-xmc8-26q4-qjhxjackson-dataformat-cbor@2.8.12.11.4
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.151.31
MediumDSA-4633-1curl@7.52.1-5+deb9u67.52.1-5+deb9u10
MediumGHSA-fj32-6v7m-57pgelasticsearch@2.4.65.6.15
MediumDLA-2836-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u3
MediumDSA-4400-1openssl1.0@1.0.2l-2+deb9u31.0.2r-1~deb9u1
MediumGHSA-mvr2-9pj6-7w5jguava@18.024.1.1-android
MediumDLA-2814-1openjdk-8@8u181-b13-1~deb9u18u312-b07-1~deb9u1
MediumGHSA-f256-j965-7f32netty@3.10.6.Finalno fix listed
MediumDSA-4349-1tiff@4.0.8-2+deb9u24.0.8-2+deb9u4
MediumDSA-4371-1apt@1.4.81.4.9
MediumDSA-4594-1openssl1.0@1.0.2l-2+deb9u31.0.2u-1~deb9u1
MediumDSA-4386-1curl@7.52.1-5+deb9u67.52.1-5+deb9u9
MediumGHSA-vp98-w2p3-mv35log4j@1.2.172.0
MediumDSA-4347-1perl@5.24.1-3+deb9u45.24.1-3+deb9u5
MediumDLA-2848-1libssh2@1.7.0-11.7.0-1+deb9u2
MediumGHSA-wx5j-54mm-rqqqnetty@3.10.6.Finalno fix listed
MediumDSA-4286-1curl@7.52.1-5+deb9u67.52.1-5+deb9u7
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.151.32
MediumDLA-2786-1nghttp2@1.18.1-11.18.1-1+deb9u2
MediumDLA-2666-1libx11@2:1.6.4-32:1.6.4-3+deb9u4
MediumDLA-2340-1sqlite3@3.16.2-5+deb9u13.16.2-5+deb9u2
MediumDLA-2500-1curl@7.52.1-5+deb9u67.52.1-5+deb9u13
MediumDSA-4435-1libpng1.6@1.6.28-11.6.28-1+deb9u1
MediumDSA-4431-1libssh2@1.7.0-11.7.0-1+deb9u1
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.151.31
MediumDLA-2715-1systemd@232-25+deb9u4232-25+deb9u13

Used by

2 charts
ChartVersionTagContainers
elasticsearch2ncsaVerified publisher0.2.22.4.61
elasticsearch2ygqygq2Verified publisher1.0.02.4.6unmeasured: HTTP 429 resolving manifest2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.