StackRadar

library/mongo:8.3.9 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/mongo

library/mongo:8.3.9 resolved to 81a1c8842a09, scanned 14 Sept 2026: 114 findings, 0 critical; deployed by 2 charts, among them mongodb and mongodb.

Radar Score

922008106

114 findings on digest 81a1c8842a09 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
8.3.9resolves to81a1c8842a092 chartsyesterday008106922

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

114 distinct on this digest

Findings for digest 81a1c8842a09 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2026-19931curl@8.5.0-2ubuntu10.13no fix listed
MediumUBUNTU-CVE-2016-20013glibc@2.39-0ubuntu8.8no fix listed
MediumUBUNTU-CVE-2026-18924curl@8.5.0-2ubuntu10.13no fix listed
MediumUBUNTU-CVE-2026-42009gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumUBUNTU-CVE-2026-33846gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumUBUNTU-CVE-2026-5260gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumUBUNTU-CVE-2026-42010gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumUBUNTU-CVE-2026-33845gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2026-82209curl@8.5.0-2ubuntu10.13no fix listed
LowUBUNTU-CVE-2026-13608curl@8.5.0-2ubuntu10.13no fix listed
LowUBUNTU-CVE-2026-80230curl@8.5.0-2ubuntu10.13no fix listed
LowUBUNTU-CVE-2026-42013gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowGHSA-52cp-r559-cp3mjs-yaml@3.13.13.15.0
LowUBUNTU-CVE-2024-2236libgcrypt20@1.10.3-2ubuntu0.2no fix listed
LowUBUNTU-CVE-2026-86145pcre2@10.42-4ubuntu2.1no fix listed
LowUBUNTU-CVE-2026-42011gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2026-85091zlib@1:1.3.dfsg-3.1ubuntu2.2no fix listed
LowGHSA-2883-xcg3-v3hhjs-yaml@3.13.13.15.2
LowUBUNTU-CVE-2026-3833gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2026-6791glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowGO-2026-4341stdlib@go1.24.61.24.12
LowUBUNTU-CVE-2026-42012gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2016-2781coreutils@9.4-3ubuntu6.3no fix listed
LowUBUNTU-CVE-2026-42015gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2026-76642util-linux@2.39.3-9ubuntu6.6no fix listed
LowUBUNTU-CVE-2026-19487perl@5.38.2-3.2ubuntu0.4no fix listed
LowGHSA-mh29-5h37-fv8mjs-yaml@3.13.13.14.2
LowGHSA-h67p-54hq-rp68js-yaml@3.13.13.15.0
LowUBUNTU-CVE-2026-78408util-linux@2.39.3-9ubuntu6.6no fix listed
LowUBUNTU-CVE-2026-54369acl@2.3.2-1build1.1no fix listed
LowUBUNTU-CVE-2026-41989libgcrypt20@1.10.3-2ubuntu0.21.12.0-2ubuntu0.1~Fips1~rc11
LowUBUNTU-CVE-2026-49839jq@1.7.1-3ubuntu0.24.04.2no fix listed
LowGO-2026-4981stdlib@go1.24.61.25.10
LowGO-2026-4977stdlib@go1.24.61.25.10
LowGO-2026-4986stdlib@go1.24.61.25.10
LowGO-2026-4918stdlib@go1.24.61.25.10
LowGO-2026-4337stdlib@go1.24.61.24.13
LowGO-2026-4601stdlib@go1.24.61.25.8
LowUBUNTU-CVE-2026-78410util-linux@2.39.3-9ubuntu6.6no fix listed
LowGO-2026-5026stdlib@go1.26.51.25.13
LowUBUNTU-CVE-2026-42014gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowGO-2026-4342stdlib@go1.24.61.24.12
LowUBUNTU-CVE-2026-78409util-linux@2.39.3-9ubuntu6.6no fix listed
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.13.13.15.1
LowGO-2026-4870stdlib@go1.24.61.25.9
LowGO-2025-4009stdlib@go1.24.61.24.8
LowGO-2026-4947stdlib@go1.24.61.25.9
LowGO-2025-4006stdlib@go1.24.61.24.8
LowGO-2026-5037stdlib@go1.24.61.25.11
LowUBUNTU-CVE-2026-43894jq@1.7.1-3ubuntu0.24.04.2no fix listed

Used by

2 charts
ChartVersionTagContainers
mongodbcloudpirates-mongodbVerified publisher0.18.138.3.92
mongodbgroundhog2k0.8.28.3.92

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.