library/sonarqube:10.0.0-community container image
Docker HubScanned 21 Oct 2026
Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:10.0.0-community resolved to ef9723cf4fe4, scanned 21 Oct 2026: 582 findings, 8 critical, 3 on KEV; deployed by 1 chart, among them sonarqube.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
582 distinct on this digest
Findings for digest ef9723cf4fe4 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | USN-8688-1 | pam | 1.4.0-11ubuntu2.8 |
| Low | USN-8944-1 | ca-certificates | 20260816ubuntu0.22.04.1 |
| Low | USN-8945-1 | xz-utils | 5.2.5-2ubuntu1.2 |
| Low | UBUNTU-CVE-2026-91781 | binutils | no fix listed |
| Low | UBUNTU-CVE-2026-91782 | binutils | no fix listed |
| Low | UBUNTU-CVE-2026-91779 | binutils | no fix listed |
| Low | UBUNTU-CVE-2026-91780 | binutils | no fix listed |
| Low | UBUNTU-CVE-2026-95818 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-105712 | gnupg2 | no fix listed |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
| Low | UBUNTU-CVE-2026-0965 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | GHSA-p47f-322f-whfh | logback-core | 1.5.33 |
| Low | UBUNTU-CVE-2025-66382 | expat | no fix listed |
| Low | USN-6477-1 | procps | 2:3.3.17-6ubuntu2.1 |
| Low | UBUNTU-CVE-2026-24515 | expat | 2.4.7-1ubuntu0.7 |
| Low | UBUNTU-CVE-2026-32778 | expat | 2.4.7-1ubuntu0.8 |
| Low | UBUNTU-CVE-2026-40228 | systemd | no fix listed |
| Low | GHSA-6v67-2wr5-gvf4 | logback-core | 1.3.15 |
| Low | USN-8692-1 | diffutils | 1:3.8-0ubuntu2.1 |
| Low | UBUNTU-CVE-2026-0967 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | UBUNTU-CVE-2025-66861 | binutils | no fix listed |
| Low | UBUNTU-CVE-2026-5958 | sed | 4.8-1ubuntu2.1 |
| Low | UBUNTU-CVE-2026-6368 | glibc | 2.35-0ubuntu3.15 |
| Low | GHSA-qqpg-mvqg-649v | logback-core | 1.5.25 |
| Low | UBUNTU-CVE-2026-86409 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-86414 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-87862 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-87864 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-92388 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-92389 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-92391 | curl | 7.81.0-1ubuntu1.30 |
| Low | UBUNTU-CVE-2026-94266 | curl | 7.81.0-1ubuntu1.30 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqubesonarqubeVerified publisher | 10.0.0+521 | 10.0.0-community | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.