library/sonarqube:6.7.6-community container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube

library/sonarqube:6.7.6-community resolved to 0ae5169e3d0f, scanned 14 Sept 2026: 425 findings, 13 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.

Radar Score

10,7181356198158

425 findings on digest 0ae5169e3d0f · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
6.7.6-communityresolves to	0ae5169e3d0f	1 chart	7 days ago	1356198158	10,718

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

425 distinct on this digest

Findings for digest 0ae5169e3d0f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.9.5	2.9.7
High	GHSA-46j3-r4pj-4835	tomcat-embed-core@8.5.23	8.5.32
High	GHSA-p8pq-r894-fm8f	xstream@1.3.1	1.4.18
High	GHSA-m59c-jpc8-m2x4	tomcat-embed-core@8.5.23	8.5.31
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.5	2.9.10.2
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.23	8.5.63
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.5	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.9.5	2.9.10.7
High	GHSA-5q99-f34m-67gc	tomcat-embed-core@8.5.23	8.5.34
High	GHSA-hvv8-336g-rx3m	xstream@1.3.1	1.4.16
High	GHSA-x2w5-5m2g-7h5m	jackson-databind@2.9.5	2.9.7
High	GHSA-vmfg-rjjm-rjrj	logback-core@1.1.2	1.2.0
High	GHSA-vmfg-rjjm-rjrj	logback-classic@1.1.2	1.2.0
High	GHSA-xw4p-crpj-vjx2	xstream@1.3.1	1.4.18
High	GHSA-74cv-f58x-f9wf	xstream@1.3.1	1.4.16
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.13.Final	4.1.44
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.5	2.9.10.8
High	GHSA-2f88-5hg8-9x2x	maven-core@3.0.5	3.8.1
High	DLA-2415-1KEV	freetype@2.6.3-3.2	2.6.3-3.2+deb9u2
Medium	GHSA-8vhq-qq4p-grq3	plexus-utils@2.0.6	3.0.16
Medium	GHSA-6v56-cpg6-3rpx	mercurial@4.0	4.4.1
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.5	2.9.10.8
Medium	GHSA-4jrv-ppp4-jm57	gson@2.7	2.8.9
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.5	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.5	2.9.10.4
Medium	GHSA-3qmg-c9vc-r47j	mercurial@4.0	4.3
Medium	GHSA-qr7j-h6gg-jmgc	jackson-databind@2.9.5	2.9.6
Medium	GHSA-mx7p-6679-8g3q	jackson-databind@2.9.5	2.9.10.1
Medium	DLA-2544-1	openldap@2.4.44+dfsg-5+deb9u2	2.4.44+dfsg-5+deb9u7
Medium	DLA-3008-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u6
Medium	DSA-4511-1	nghttp2@1.18.1-1	1.18.1-1+deb9u1
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.9.5	2.9.10.8
Medium	GHSA-gjmw-vf9h-g25v	jackson-databind@2.9.5	2.9.10.1
Medium	GHSA-h3cw-g4mq-c5x2	jackson-databind@2.9.5	2.9.10.6
Medium	GHSA-q446-82vq-w674	jsch@0.1.53	0.1.54
Medium	GHSA-j563-grx4-pjpv	xstream@1.3.1	1.4.20
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.2.1	42.2.28
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@8.5.23	8.5.60
Medium	DLA-2952-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u5
Medium	DLA-2953-1	openssl1.0@1.0.2r-1~deb9u1	1.0.2u-1~deb9u7
Medium	GHSA-85cw-hj65-qqv9	jackson-databind@2.9.5	2.9.10
Medium	GHSA-fmmc-742q-jg75	jackson-databind@2.9.5	2.9.10.1
Medium	GHSA-gwp4-hfv6-p7hw	jackson-databind@2.9.5	2.9.9.2
Medium	GHSA-j823-4qch-3rgm	jackson-databind@2.9.5	2.9.10.5
Medium	GHSA-9xcj-c8cr-8c3c	tomcat-embed-core@8.5.23	8.5.50
Medium	GHSA-f3j5-rmmp-3fc5	jackson-databind@2.9.5	2.9.10
Medium	GHSA-5p34-5m6p-p58g	jackson-databind@2.9.5	2.9.10.4
Medium	GHSA-c265-37vj-cwcc	jackson-databind@2.9.5	2.9.10.5
Medium	GHSA-9vvp-fxw6-jcxr	jackson-databind@2.9.5	2.9.10.4
Medium	GHSA-wh8g-3j2c-rqj5	jackson-databind@2.9.5	2.9.10.8

Used by

1 chart

Chart	Version	Tag	Containers
sonarqubestakaterVerified publisher	0.10.3	6.7.6-community	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.