StackRadar

library/mongo:9.0.4 container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of library/mongo

library/mongo:9.0.4 resolved to dc28ed5a9d0f, scanned 21 Oct 2026: 155 findings, 0 critical; deployed by 1 chart, among them mongodb.

Radar Score

1,412008147

155 findings on digest dc28ed5a9d0f · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
9.0.4resolves todc28ed5a9d0f1 charttoday0081471,412

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

147 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest dc28ed5a9d0f as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-103111pcre2@10.46-1build1no fix listed
LowUBUNTU-CVE-2026-95210gnutls28@3.8.12-2ubuntu1.1no fix listed
LowUBUNTU-CVE-2026-78408util-linux@2.41.3-3ubuntu2.2no fix listed
LowGO-2026-4980stdlib@go1.24.61.25.10
LowUBUNTU-CVE-2026-7017perl@5.40.1-7ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-95209gnutls28@3.8.12-2ubuntu1.1no fix listed
LowGO-2025-4011stdlib@go1.24.61.24.8
LowGO-2025-4015stdlib@go1.24.61.24.8
LowGO-2026-4603stdlib@go1.24.61.25.8
LowGO-2025-4175stdlib@go1.24.61.24.11
LowGO-2026-4864stdlib@go1.24.61.25.9
LowGO-2026-4982stdlib@go1.24.61.25.10
LowUBUNTU-CVE-2026-78410util-linux@2.41.3-3ubuntu2.2no fix listed
LowGO-2026-6091stdlib@go1.24.61.25.13
LowUBUNTU-CVE-2026-35368rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowGO-2025-4008stdlib@go1.24.61.24.8
LowGO-2025-4010stdlib@go1.24.61.24.8
LowUBUNTU-CVE-2026-95184gnutls28@3.8.12-2ubuntu1.1no fix listed
LowUBUNTU-CVE-2026-89158pcre2@10.46-1build1no fix listed
LowGO-2026-4865stdlib@go1.24.61.25.9
LowUBUNTU-CVE-2026-67693gnutls28@3.8.12-2ubuntu1.1no fix listed
LowGHSA-mh29-5h37-fv8mjs-yaml@3.13.13.14.2
LowGHSA-h67p-54hq-rp68js-yaml@3.13.13.15.0
LowGO-2026-4976stdlib@go1.24.61.25.10
LowGO-2026-5039stdlib@go1.24.61.25.11
LowUBUNTU-CVE-2026-107708krb5@1.22.1-2ubuntu4.1no fix listed
LowUBUNTU-CVE-2026-49839jq@1.8.1-4ubuntu2no fix listed
LowGO-2026-5856stdlib@go1.24.61.25.12
LowUBUNTU-CVE-2026-54369acl@2.3.2-2no fix listed
LowUBUNTU-CVE-2026-78409util-linux@2.41.3-3ubuntu2.2no fix listed
LowUBUNTU-CVE-2026-89157pcre2@10.46-1build1no fix listed
LowUBUNTU-CVE-2026-89161pcre2@10.46-1build1no fix listed
LowUBUNTU-CVE-2026-35341rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowGO-2026-4340stdlib@go1.24.61.24.12
LowUBUNTU-CVE-2026-93658rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowUBUNTU-CVE-2026-8674glibc@2.43-2ubuntu2.4no fix listed
LowGO-2026-6599stdlib@go1.26.81.26.9
LowGO-2026-6600stdlib@go1.26.81.26.9
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.13.13.15.1
LowUBUNTU-CVE-2026-35352rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowUBUNTU-CVE-2026-56391coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.1
LowUBUNTU-CVE-2026-35350rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowUBUNTU-CVE-2026-13757p11-kit@0.26.2-2no fix listed
LowUBUNTU-CVE-2026-43894jq@1.8.1-4ubuntu2no fix listed
LowUBUNTU-CVE-2026-43896jq@1.8.1-4ubuntu2no fix listed
LowUBUNTU-CVE-2026-88648gnutls28@3.8.12-2ubuntu1.1no fix listed
LowGO-2026-4869stdlib@go1.24.61.25.9
LowUBUNTU-CVE-2026-35363rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowUBUNTU-CVE-2026-41256jq@1.8.1-4ubuntu2no fix listed
LowUBUNTU-CVE-2026-40612jq@1.8.1-4ubuntu2no fix listed

Used by

1 chart
ChartVersionTagContainers
mongodbhelmforgeVerified publisher1.8.69.0.41

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.