library/sonarqube:6.7.6-community container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube

library/sonarqube:6.7.6-community resolved to 0ae5169e3d0f, scanned 14 Sept 2026: 425 findings, 13 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.

Radar Score

10,7181356198158

425 findings on digest 0ae5169e3d0f · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
6.7.6-communityresolves to	0ae5169e3d0f	1 chart	7 days ago	1356198158	10,718

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

High findings

56 distinct on this digest

High: findings whose contribution to the Radar Score is 40–69. Show every band

Findings for digest 0ae5169e3d0f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	GHSA-9339-86wc-4qgf	xalan@2.7.2	2.7.3
High	GHSA-2p3x-qw9c-25hh	xstream@1.3.1	1.4.16
High	GHSA-7chv-rrw6-w6fc	xstream@1.3.1	1.4.17
High	GHSA-q4hg-rmq2-52q9	tomcat-embed-core@8.5.23	8.5.41
High	GHSA-qcxh-w3j9-58qr	tomcat-embed-core@8.5.23	8.5.38
High	GHSA-8489-44mv-ggj8	log4j-core@2.9.1	2.12.4
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.23	no fix listed
High	GHSA-jfvx-7wrx-43fh	xstream@1.3.1	1.4.15
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.23	no fix listed
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.5	2.9.10.3
High	GHSA-4cch-wxpw-8p28	xstream@1.3.1	1.4.15
High	GHSA-r4x2-3cq5-hqvp	tomcat-embed-core@8.5.23	8.5.32
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.23	8.5.55
High	GHSA-4hrm-m67v-5cxr	xstream@1.3.1	1.4.16
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.5	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.5	2.9.10.4
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.23	8.5.94
High	GHSA-ghjx-3jg5-h6r2	mercurial@4.0	4.1.3
High	GHSA-hwpc-8xqv-jvj4	xstream@1.3.1	1.4.16
High	GHSA-hrcp-8f3q-4w2c	xstream@1.3.1	1.4.16
High	GHSA-645p-88qh-w398	jackson-databind@2.9.5	2.9.7
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.9.3	1.9.4
High	GHSA-59jw-jqf4-3wq3	xstream@1.3.1	1.4.16
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.15	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.23	8.5.55
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.5	2.9.10.8
High	GHSA-f6hm-88x3-mfjv	xstream@1.3.1	1.4.16
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.9.5	2.9.7
High	GHSA-jjpq-gp5q-8q6w	tomcat-embed-core@8.5.23	8.5.40
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.5	2.9.10
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.9.5	2.9.8
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.9.5	2.9.8
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.9.5	2.9.8
High	GHSA-g5w6-mrj7-75h2	xstream@1.3.1	1.4.18
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.23	8.5.99
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.5	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.5	2.9.9
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.9.5	2.9.7
High	GHSA-46j3-r4pj-4835	tomcat-embed-core@8.5.23	8.5.32
High	GHSA-p8pq-r894-fm8f	xstream@1.3.1	1.4.18
High	GHSA-m59c-jpc8-m2x4	tomcat-embed-core@8.5.23	8.5.31
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.5	2.9.10.2
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.23	8.5.63
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.5	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.9.5	2.9.10.7
High	GHSA-5q99-f34m-67gc	tomcat-embed-core@8.5.23	8.5.34
High	GHSA-hvv8-336g-rx3m	xstream@1.3.1	1.4.16
High	GHSA-x2w5-5m2g-7h5m	jackson-databind@2.9.5	2.9.7
High	GHSA-vmfg-rjjm-rjrj	logback-core@1.1.2	1.2.0
High	GHSA-vmfg-rjjm-rjrj	logback-classic@1.1.2	1.2.0

Used by

1 chart

Chart	Version	Tag	Containers
sonarqubestakaterVerified publisher	0.10.3	6.7.6-community	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.