library/sonarqube:10.0.0-community container image
Docker HubScanned 21 Oct 2026
Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:10.0.0-community resolved to ef9723cf4fe4, scanned 21 Oct 2026: 582 findings, 8 critical, 3 on KEV; deployed by 1 chart, among them sonarqube.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
582 distinct on this digest
Findings for digest ef9723cf4fe4 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-14524 | curl | 7.81.0-1ubuntu1.22 |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.7.3-4ubuntu1.8 |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.3.15 |
| Low | UBUNTU-CVE-2026-103111 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-95210 | gnutls28 | no fix listed |
| Low | UBUNTU-CVE-2025-0840 | binutils | 2.38-4ubuntu2.7 |
| Low | UBUNTU-CVE-2026-6846 | binutils | no fix listed |
| Low | UBUNTU-CVE-2025-65018 | libpng1.6 | 1.6.37-3ubuntu0.1 |
| Low | UBUNTU-CVE-2023-2975 | openssl | 3.0.2-0ubuntu1.12 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-53615 | util-linux | 2.37.2-4ubuntu3.6 |
| Low | GHSA-4g9r-vxhx-9pgx | commons-compress | 1.26.0 |
| Low | UBUNTU-CVE-2025-1181 | binutils | 2.38-4ubuntu2.8 |
| Low | GHSA-qf7c-7r9h-mm92 | x-pack-security | 8.19.9 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | GHSA-84h7-rjj3-6jx4 | netty-codec-http | 4.1.129.Final |
| Low | USN-8691-1 | attr | 1:2.5.1-1ubuntu0.1 |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | USN-8510-1 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 3.0.2-0ubuntu1.21 |
| Low | UBUNTU-CVE-2026-102010 | gcc-12 | no fix listed |
| Low | UBUNTU-CVE-2026-95209 | gnutls28 | no fix listed |
| Low | USN-7259-1 | glibc | 2.35-0ubuntu3.9 |
| Low | UBUNTU-CVE-2025-1176 | binutils | 2.38-4ubuntu2.8 |
| Low | UBUNTU-CVE-2026-11824 | sqlite3 | 3.37.2-2ubuntu0.6 |
| Low | UBUNTU-CVE-2025-15079 | curl | 7.81.0-1ubuntu1.22 |
| Low | USN-6719-1 | util-linux | 2.37.2-4ubuntu3.3 |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2026-58471 | wget | 1.21.2-2ubuntu1.3 |
| Low | UBUNTU-CVE-2026-58472 | wget | 1.21.2-2ubuntu1.3 |
| Low | GHSA-wjgm-6hv5-3cvf | jackson-databind | 2.18.10 |
| Low | UBUNTU-CVE-2026-3783 | curl | 7.81.0-1ubuntu1.23 |
| Low | USN-7162-1 | curl | 7.81.0-1ubuntu1.20 |
| Low | UBUNTU-CVE-2026-6429 | curl | 7.81.0-1ubuntu1.24 |
| Low | UBUNTU-CVE-2022-48063 | binutils | 2.38-4ubuntu2.6 |
| Low | USN-6588-1 | pam | 1.4.0-11ubuntu2.4 |
| Low | UBUNTU-CVE-2025-1182 | binutils | 2.38-4ubuntu2.8 |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-4873 | curl | 7.81.0-1ubuntu1.24 |
| Low | UBUNTU-CVE-2026-77117 | glibc | 2.35-0ubuntu3.15 |
| Low | UBUNTU-CVE-2026-80489 | glibc | 2.35-0ubuntu3.15 |
| Low | UBUNTU-CVE-2022-4285 | binutils | 2.38-4ubuntu2.4 |
| Low | UBUNTU-CVE-2026-1965 | curl | 7.81.0-1ubuntu1.23 |
| Low | UBUNTU-CVE-2025-68973 | gnupg2 | 2.2.27-3ubuntu2.5 |
| Low | USN-7542-1 | krb5 | 1.19.2-2ubuntu0.7 |
| Low | GHSA-68m8-v89j-7j2p | bc-fips | 1.0.2.4 |
| Low | UBUNTU-CVE-2026-102633 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-25210 | expat | 2.4.7-1ubuntu0.7 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqubesonarqubeVerified publisher | 10.0.0+521 | 10.0.0-community | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.