library/sonarqube:6.7.6-community container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:6.7.6-community resolved to 0ae5169e3d0f, scanned 14 Sept 2026: 425 findings, 13 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.
Radar Score
425 findings on digest 0ae5169e3d0f · scanned 14 Sept 2026
KEV ×7 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 0ae5169e3d0f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-c77j-p484-h84m | elasticsearch | 6.8.12 |
| Low | DLA-2976-1 | gzip | 1.6-5+deb9u1 |
| Low | DLA-2977-1 | xz-utils | 5.2.2-1.2+deb9u1 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-g8pj-r55q-5c2v | tomcat-embed-core | 8.5.94 |
| Low | GHSA-3pxv-7cmr-fjr4 | log4j-core | 2.25.4 |
| Low | DSA-4621-1 | openjdk-8 | 8u242-b08-1~deb9u1 |
| Low | DLA-2904-1 | expat | 2.2.0-2+deb9u4 |
| Low | DLA-2378-1 | openssl1.0 | 1.0.2u-1~deb9u2 |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-c5vj-wp4v-mmvx | hazelcast | 5.0.5 |
| Low | GHSA-4gg5-vx3j-xwc7 | protobuf-java | 3.16.3 |
| Low | DLA-2828-1 | libvorbis | 1.3.5-4+deb9u3 |
| Low | GHSA-mq66-vcfc-8246 | mercurial | 4.9 |
| Low | DLA-2773-1 | curl | 7.52.1-5+deb9u16 |
| Low | DSA-4666-1 | openldap | 2.4.44+dfsg-5+deb9u4 |
| Low | DLA-2437-1 | krb5 | 1.15-1+deb9u2 |
| Low | GHSA-6fmv-xxpf-w3cw | plexus-utils | 3.6.1 |
| Low | DLA-2372-1 | libproxy | 0.4.14-2+deb9u1 |
| Low | DSA-4485-1 | openjdk-8 | 8u222-b10-1~deb9u1 |
| Low | DLA-2325-1 | openjdk-8 | 8u265-b01-0+deb9u1 |
| Low | DLA-2737-1 | openjdk-8 | 8u302-b08-1~deb9u1 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | DLA-2514-1 | flac | 1.3.2-2+deb9u1 |
| Low | DLA-2931-1 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 |
| Low | DLA-3044-1 | glib2.0 | 2.50.3-2+deb9u3 |
| Low | DLA-3006-1 | openjdk-8 | 8u332-ga-1~deb9u1 |
| Low | GHSA-w33c-445m-f8w7 | okio | 1.17.6 |
| Low | DLA-3058-1 | libsndfile | 1.0.27-3+deb9u3 |
| Low | DSA-4659-1 | git | 1:2.11.0-3+deb9u7 |
| Low | DSA-4539-1 | openssl | 1.1.0l-1~deb9u1 |
| Low | DSA-4540-1 | openssl1.0 | 1.0.2t-1~deb9u1 |
| Low | GHSA-vrpq-qp53-qv56 | org.eclipse.jgit | 5.13.4.202507202350-r |
| Low | DLA-2382-1 | curl | 7.52.1-5+deb9u12 |
| Low | DLA-2412-1 | openjdk-8 | 8u272-b10-0+deb9u1 |
| Low | DLA-3012-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u7 |
| Low | DSA-4548-1 | openjdk-8 | 8u232-b09-1~deb9u1 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | DLA-2837-1 | gmp | 2:6.1.2+dfsg-1+deb9u1 |
| Low | DLA-2802-1 | elfutils | 0.168-1+deb9u1 |
| Low | GHSA-fv25-8xcx-gqjc | tomcat-embed-core | 9.0.118 |
| Low | DLA-2340-2 | sqlite3 | 3.16.2-5+deb9u3 |
| Low | DLA-2634-1 | openjdk-8 | 8u292-b10-0+deb9u1 |
| Low | DLA-2450-1 | libproxy | 0.4.14-2+deb9u2 |
| Low | GHSA-xh6m-7cr7-xx66 | hazelcast | no fix listed |
| Low | DSA-4490-1 | subversion | 1.9.5-1+deb9u4 |
| Low | GHSA-563x-q5rq-57qp | tomcat-embed-core | 9.0.116 |
| Low | DLA-2302-1 | libjpeg-turbo | 1:1.5.1-2+deb9u1 |
| Low | DLA-2513-1 | p11-kit | 0.23.3-2+deb9u1 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqubestakaterVerified publisher | 0.10.3 | 6.7.6-community | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.