library/sonarqube:10.0.0-community container image
Docker HubScanned 21 Oct 2026
Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:10.0.0-community resolved to ef9723cf4fe4, scanned 21 Oct 2026: 582 findings, 8 critical, 3 on KEV; deployed by 1 chart, among them sonarqube.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
582 distinct on this digest
Findings for digest ef9723cf4fe4 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | UBUNTU-CVE-2023-38545 | curl | 7.81.0-1ubuntu1.14 |
| Critical | UBUNTU-CVE-2025-6965 | sqlite3 | 3.37.2-2ubuntu0.5 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | USN-7352-1KEV | freetype | 2.11.1+dfsg-1ubuntu0.3 |
| Critical | UBUNTU-CVE-2025-15467 | openssl | 3.0.2-0ubuntu1.21 |
| Critical | USN-6409-1KEV | glibc | 2.35-0ubuntu3.4 |
| Critical | USN-6505-1KEV | nghttp2 | 1.43.0-1ubuntu0.1 |
| Critical | USN-6737-1 | glibc | 2.35-0ubuntu3.7 |
| High | USN-6986-1 | openssl | 3.0.2-0ubuntu1.18 |
| High | UBUNTU-CVE-2024-2398 | curl | 7.81.0-1ubuntu1.16 |
| High | UBUNTU-CVE-2023-2650 | openssl | 3.0.2-0ubuntu1.10+Fips1 |
| High | USN-6561-1 | libssh | 0.9.6-2ubuntu0.22.04.2 |
| High | GHSA-qwrx-45xf-jjf7 | elasticsearch | 8.9.1 |
| High | UBUNTU-CVE-2024-28182 | nghttp2 | 1.43.0-1ubuntu0.2 |
| High | USN-7257-1 | krb5 | 1.19.2-2ubuntu0.5 |
| High | UBUNTU-CVE-2024-2511 | openssl | 3.0.2-0ubuntu1.17 |
| Medium | USN-6944-1 | curl | 7.81.0-1ubuntu1.17 |
| Medium | GHSA-3f7h-mf4q-vrm4 | woodstox-core | 5.4.0 |
| Medium | GHSA-24rp-q3w6-vc56 | postgresql | 42.5.5 |
| Medium | UBUNTU-CVE-2024-5535 | openssl | 3.0.2-0ubuntu1.17 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-common | 2.9.2 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-core | 2.9.2 |
| Medium | UBUNTU-CVE-2022-48522 | perl | 5.34.0-3ubuntu1.3 |
| Medium | GHSA-j8wc-gxx9-82hx | xmlsec | 2.1.7 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.2-0ubuntu1.25 |
| Medium | UBUNTU-CVE-2021-46848 | libtasn1-6 | 4.18.0-4ubuntu0.2 |
| Medium | UBUNTU-CVE-2024-45490 | expat | 2.4.7-1ubuntu0.4 |
| Medium | GHSA-3p86-9955-h393 | org.eclipse.jgit | 6.6.1.202309021850-r |
| Medium | UBUNTU-CVE-2023-5363 | openssl | 3.0.2-0ubuntu1.12 |
| Medium | UBUNTU-CVE-2024-37371 | krb5 | 1.19.2-2ubuntu0.4 |
| Medium | GHSA-98qh-xjc8-98pq | postgresql | 42.7.11 |
| Medium | UBUNTU-CVE-2017-11164 | pcre3 | no fix listed |
| Medium | UBUNTU-CVE-2024-4741 | openssl | 3.0.2-0ubuntu1.17 |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | GHSA-gwrp-pvrq-jmwv | commons-io | 2.7 |
| Medium | USN-6854-1 | openssl | 3.0.2-0ubuntu1.16 |
| Medium | UBUNTU-CVE-2026-8925 | curl | 7.81.0-1ubuntu1.25 |
| Medium | UBUNTU-CVE-2025-5318 | libssh | 0.9.6-2ubuntu0.22.04.4 |
| Medium | UBUNTU-CVE-2023-3446 | openssl | 3.0.2-0ubuntu1.12 |
| Medium | GHSA-fg2v-w576-w4v3 | json-smart | 2.4.4 |
| Medium | UBUNTU-CVE-2023-31486 | perl | no fix listed |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | UBUNTU-CVE-2023-52425 | expat | 2.4.7-1ubuntu0.3 |
| Medium | GHSA-2cqf-6xv9-f22w | elasticsearch | 8.9.0 |
| Medium | UBUNTU-CVE-2018-5709 | krb5 | no fix listed |
| Medium | UBUNTU-CVE-2024-28757 | expat | 2.4.7-1ubuntu0.3 |
| Medium | USN-6616-1 | openldap | 2.5.16+dfsg-0ubuntu0.22.04.2 |
| Medium | UBUNTU-CVE-2026-34182 | openssl | 3.0.2-0ubuntu1.25 |
| Medium | USN-6467-2 | krb5 | 1.19.2-2ubuntu0.3 |
| Medium | GHSA-4jq9-2xhw-jpx7 | json | 20231013 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqubesonarqubeVerified publisher | 10.0.0+521 | 10.0.0-community | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.