library/neo4j:4.2.4 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/neo4j
library/neo4j:4.2.4 resolved to 348e3f56faa2, scanned 14 Sept 2026: 139 findings, 7 critical, 3 on KEV; deployed by 1 chart, among them neo4j-community.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
139 distinct on this digest
Findings for digest 348e3f56faa2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-jfh8-c2jp-5v3qKEV | log4j-core | 2.15.0 |
| Critical | GHSA-599f-7c49-w659 | commons-text | 1.10.0 |
| Critical | GHSA-7rjr-3q55-vv33KEV | log4j-core | 2.16.0 |
| Critical | GHSA-f6jp-j6w3-w9hm | shiro-core | 1.8.0 |
| Critical | GHSA-p6xc-xr62-6r2g | log4j-core | 2.17.0 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-xj57-8qj4-c4m6 | commons-configuration2 | 2.8.0 |
| High | GHSA-8489-44mv-ggj8 | log4j-core | 2.17.1 |
| High | GHSA-4cf5-xmhp-3xj7 | shiro-core | 1.9.1 |
| High | GHSA-26vr-8j45-3r4w | jetty-server | 9.4.39 |
| High | GHSA-vjv5-gp2w-65vm | jetty-webapp | 9.4.43 |
| High | GHSA-v7ff-8wcx-gmc5 | jetty-webapp | 9.4.39 |
| High | DSA-5514-1KEV | glibc | 2.31-13+deb11u7 |
| Medium | DLA-3859-1 | systemd | 247.3-7+deb11u6 |
| Medium | DSA-5673-1 | glibc | 2.31-13+deb11u9 |
| Medium | GHSA-mc84-pj99-q6hh | commons-compress | 1.21 |
| Medium | GHSA-crv7-7245-f45f | commons-compress | 1.21 |
| Medium | GHSA-7hfm-57qf-j43q | commons-compress | 1.21 |
| Medium | DSA-5417-1 | openssl | 1.1.1n-0+deb11u5 |
| Medium | GHSA-xqfj-vm6h-2x34 | commons-compress | 1.21 |
| Medium | DSA-5343-1 | openssl | 1.1.1n-0+deb11u4 |
| Medium | DLA-3942-1 | openssl | 1.1.1n-0+deb11u6 |
| Medium | DLA-3942-2 | openssl | 1.1.1w-0+deb11u2 |
| Medium | GHSA-9vjp-v76f-g363 | netty-codec | 4.1.68.Final |
| Medium | GHSA-grg4-wf29-r9vv | netty-codec | 4.1.68.Final |
| Medium | GHSA-45x9-q6vj-cqgq | shiro-core | 1.10.0 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-wxr5-93ph-8wr9 | commons-beanutils | 1.11.0 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | GHSA-4mpj-488r-vh6m | apoc | 4.2.10 |
| Medium | DSA-5218-1 | zlib | 1:1.2.11.dfsg-2+deb11u2 |
| Medium | GHSA-2w4h-f44w-968f | neo4j-kernel | 4.2.8 |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | GHSA-x27m-9w8j-5vcw | jettison | 1.5.2 |
| Medium | GHSA-6mjq-h674-j845 | netty-handler | 4.1.94.Final |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-v528-7hrm-frqp | json-smart | 2.3.1 |
| Medium | GHSA-7rf3-mqpx-h7xg | jettison | 1.5.2 |
| Medium | GHSA-grr4-wv38-f68w | jettison | 1.5.2 |
| Medium | GHSA-c4r9-r8fh-9vj2 | snakeyaml | 1.31 |
| Medium | GHSA-xjp4-hw94-mvp5 | commons-configuration2 | 2.10.1 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | GHSA-qw69-rqj8-6qw8 | jetty-server | 9.4.51.v20230217 |
| Medium | GHSA-9w38-p64v-xpmv | commons-configuration2 | 2.10.1 |
| Medium | GHSA-3x8x-79m2-3w2w | jackson-databind | 2.12.6 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| neo4j-communityequinor-charts | 1.2.5 | 4.2.4 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.