library/sonarqube:6.7.6-community container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube

library/sonarqube:6.7.6-community resolved to 0ae5169e3d0f, scanned 14 Sept 2026: 425 findings, 13 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.

Radar Score

10,7181356198158

425 findings on digest 0ae5169e3d0f · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
6.7.6-communityresolves to	0ae5169e3d0f	1 chart	7 days ago	1356198158	10,718

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

425 distinct on this digest

Findings for digest 0ae5169e3d0f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.9.1	2.12.2
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.23	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.23	8.5.51
Critical	GHSA-f554-x222-wgf7	xstream@1.3.1	1.4.7
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.9.1	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.9.1	2.12.3
Critical	GHSA-j9h8-phrw-h4fhKEV	xstream@1.3.1	1.4.18
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.15	2.0
Critical	GHSA-8vmx-qmch-mpqg	tomcat-embed-core@8.5.23	8.5.40
Critical	GHSA-mw36-7c6c-q4q2	xstream@1.3.1	1.4.14-java7
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.9.3	1.9.4
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.23	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.23	no fix listed
High	GHSA-9339-86wc-4qgf	xalan@2.7.2	2.7.3
High	GHSA-2p3x-qw9c-25hh	xstream@1.3.1	1.4.16
High	GHSA-7chv-rrw6-w6fc	xstream@1.3.1	1.4.17
High	GHSA-q4hg-rmq2-52q9	tomcat-embed-core@8.5.23	8.5.41
High	GHSA-qcxh-w3j9-58qr	tomcat-embed-core@8.5.23	8.5.38
High	GHSA-8489-44mv-ggj8	log4j-core@2.9.1	2.12.4
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.23	no fix listed
High	GHSA-jfvx-7wrx-43fh	xstream@1.3.1	1.4.15
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.23	no fix listed
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.5	2.9.10.3
High	GHSA-4cch-wxpw-8p28	xstream@1.3.1	1.4.15
High	GHSA-r4x2-3cq5-hqvp	tomcat-embed-core@8.5.23	8.5.32
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.23	8.5.55
High	GHSA-4hrm-m67v-5cxr	xstream@1.3.1	1.4.16
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.5	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.5	2.9.10.4
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.23	8.5.94
High	GHSA-ghjx-3jg5-h6r2	mercurial@4.0	4.1.3
High	GHSA-hwpc-8xqv-jvj4	xstream@1.3.1	1.4.16
High	GHSA-hrcp-8f3q-4w2c	xstream@1.3.1	1.4.16
High	GHSA-645p-88qh-w398	jackson-databind@2.9.5	2.9.7
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.9.3	1.9.4
High	GHSA-59jw-jqf4-3wq3	xstream@1.3.1	1.4.16
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.15	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.23	8.5.55
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.5	2.9.10.8
High	GHSA-f6hm-88x3-mfjv	xstream@1.3.1	1.4.16
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.9.5	2.9.7
High	GHSA-jjpq-gp5q-8q6w	tomcat-embed-core@8.5.23	8.5.40
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.5	2.9.10
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.9.5	2.9.8
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.9.5	2.9.8
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.9.5	2.9.8
High	GHSA-g5w6-mrj7-75h2	xstream@1.3.1	1.4.18
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.23	8.5.99
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.5	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.5	2.9.9

Used by

1 chart

Chart	Version	Tag	Containers
sonarqubestakaterVerified publisher	0.10.3	6.7.6-community	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.