library/elasticsearch:2.4.6 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/elasticsearch
library/elasticsearch:2.4.6 resolved to 41ed3a1a16b6, scanned 14 Sept 2026: 182 findings, 5 critical, 1 on KEV; deployed by 2 charts, among them elasticsearch2 and elasticsearch2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
182 distinct on this digest
Findings for digest 41ed3a1a16b6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | DSA-4286-1 | curl | 7.52.1-5+deb9u7 |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | DLA-2786-1 | nghttp2 | 1.18.1-1+deb9u2 |
| Medium | DLA-2666-1 | libx11 | 2:1.6.4-3+deb9u4 |
| Medium | DLA-2340-1 | sqlite3 | 3.16.2-5+deb9u2 |
| Medium | DLA-2500-1 | curl | 7.52.1-5+deb9u13 |
| Medium | DSA-4435-1 | libpng1.6 | 1.6.28-1+deb9u1 |
| Medium | DSA-4431-1 | libssh2 | 1.7.0-1+deb9u1 |
| Medium | GHSA-c4r9-r8fh-9vj2 | snakeyaml | 1.31 |
| Medium | DLA-2715-1 | systemd | 232-25+deb9u13 |
| Medium | DLA-2917-1 | openjdk-8 | 8u322-b06-1~deb9u1 |
| Medium | DLA-2653-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u4 |
| Medium | GHSA-2cqf-6xv9-f22w | elasticsearch | 7.17.13 |
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | DSA-4591-1 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 |
| Medium | DLA-2369-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u3 |
| Medium | DSA-4326-1 | openjdk-8 | 8u181-b13-2~deb9u1 |
| Medium | DSA-4472-1 | expat | 2.2.0-2+deb9u2 |
| Medium | DLA-2492-1 | openssl | 1.1.0l-1~deb9u2 |
| Medium | DLA-2493-1 | openssl1.0 | 1.0.2u-1~deb9u3 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | DSA-4530-1 | expat | 2.2.0-2+deb9u3 |
| Medium | GHSA-w37g-rhq8-7m4j | snakeyaml | 1.32 |
| Medium | GHSA-5mcr-gq6c-3hq2 | netty | no fix listed |
| Medium | GHSA-3393-hvrj-w7v3 | elasticsearch | 6.8.17 |
| Medium | DLA-2734-1 | curl | 7.52.1-5+deb9u15 |
| Medium | DSA-4668-1 | openjdk-8 | 8u252-b09-1~deb9u1 |
| Medium | DLA-2972-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u6 |
| Medium | DSA-4425-1 | wget | 1.18-5+deb9u3 |
| Medium | DSA-4331-1 | curl | 7.52.1-5+deb9u8 |
| Medium | DSA-4475-1 | openssl | 1.1.0k-1~deb9u1 |
| Medium | DLA-2664-1 | curl | 7.52.1-5+deb9u14 |
| Low | GHSA-c77j-p484-h84m | elasticsearch | 6.8.12 |
| Low | DLA-2976-1 | gzip | 1.6-5+deb9u1 |
| Low | DLA-2977-1 | xz-utils | 5.2.2-1.2+deb9u1 |
| Low | DSA-4621-1 | openjdk-8 | 8u242-b08-1~deb9u1 |
| Low | DLA-2904-1 | expat | 2.2.0-2+deb9u4 |
| Low | DLA-2378-1 | openssl1.0 | 1.0.2u-1~deb9u2 |
| Low | DLA-2828-1 | libvorbis | 1.3.5-4+deb9u3 |
| Low | DLA-2773-1 | curl | 7.52.1-5+deb9u16 |
| Low | DSA-4666-1 | openldap | 2.4.44+dfsg-5+deb9u4 |
| Low | DLA-2437-1 | krb5 | 1.15-1+deb9u2 |
| Low | DLA-2372-1 | libproxy | 0.4.14-2+deb9u1 |
| Low | DSA-4485-1 | openjdk-8 | 8u222-b10-1~deb9u1 |
| Low | DLA-2325-1 | openjdk-8 | 8u265-b01-0+deb9u1 |
| Low | DLA-2737-1 | openjdk-8 | 8u302-b08-1~deb9u1 |
| Low | DLA-2514-1 | flac | 1.3.2-2+deb9u1 |
| Low | DLA-2931-1 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 |
| Low | DLA-3044-1 | glib2.0 | 2.50.3-2+deb9u3 |
| Low | DLA-3006-1 | openjdk-8 | 8u332-ga-1~deb9u1 |
Used by
2 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| elasticsearch2ncsaVerified publisher | 0.2.2 | 2.4.6 | 1 |
| elasticsearch2ygqygq2Verified publisher | 1.0.0 | 2.4.6unmeasured: HTTP 429 resolving manifest | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.