library/sonarqube:6.7.6-community container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:6.7.6-community resolved to 0ae5169e3d0f, scanned 14 Sept 2026: 425 findings, 13 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.
Radar Score
10,7181356198158
425 findings on digest 0ae5169e3d0f · scanned 14 Sept 2026
KEV ×7 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
425 distinct on this digest
Findings for digest 0ae5169e3d0f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-5mcr-gq6c-3hq2 | netty-codec-http | 4.1.59.Final |
| Medium | GHSA-hh3j-x4mc-g48r | tomcat-embed-core | 8.5.49 |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.1.133.Final |
| Medium | GHSA-vwqq-5vrc-xw9h | log4j-core | 2.12.3 |
| Medium | DLA-2293-1 | mercurial | 4.0-1+deb9u2 |
| Medium | GHSA-3393-hvrj-w7v3 | elasticsearch | 6.8.17 |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.1.136.Final |
| Medium | DLA-2734-1 | curl | 7.52.1-5+deb9u15 |
| Medium | DSA-4668-1 | openjdk-8 | 8u252-b09-1~deb9u1 |
| Medium | DLA-2972-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u6 |
| Medium | DSA-4425-1 | wget | 1.18-5+deb9u3 |
| Medium | GHSA-3cqm-mf7h-prrj | okhttp | 4.9.2 |
| Medium | DSA-4475-1 | openssl | 1.1.0k-1~deb9u1 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | GHSA-gx5v-xp9w-j4cg | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-g5ww-5jh7-63cx | protobuf-java | 3.16.3 |
| Medium | DLA-2664-1 | curl | 7.52.1-5+deb9u14 |
| Low | GHSA-c77j-p484-h84m | elasticsearch | 6.8.12 |
| Low | DLA-2976-1 | gzip | 1.6-5+deb9u1 |
| Low | DLA-2977-1 | xz-utils | 5.2.2-1.2+deb9u1 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-g8pj-r55q-5c2v | tomcat-embed-core | 8.5.94 |
| Low | GHSA-3pxv-7cmr-fjr4 | log4j-core | 2.25.4 |
| Low | DSA-4621-1 | openjdk-8 | 8u242-b08-1~deb9u1 |
| Low | DLA-2904-1 | expat | 2.2.0-2+deb9u4 |
| Low | DLA-2378-1 | openssl1.0 | 1.0.2u-1~deb9u2 |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-c5vj-wp4v-mmvx | hazelcast | 5.0.5 |
| Low | GHSA-4gg5-vx3j-xwc7 | protobuf-java | 3.16.3 |
| Low | DLA-2828-1 | libvorbis | 1.3.5-4+deb9u3 |
| Low | GHSA-mq66-vcfc-8246 | mercurial | 4.9 |
| Low | DLA-2773-1 | curl | 7.52.1-5+deb9u16 |
| Low | DSA-4666-1 | openldap | 2.4.44+dfsg-5+deb9u4 |
| Low | DLA-2437-1 | krb5 | 1.15-1+deb9u2 |
| Low | GHSA-6fmv-xxpf-w3cw | plexus-utils | 3.6.1 |
| Low | DLA-2372-1 | libproxy | 0.4.14-2+deb9u1 |
| Low | DSA-4485-1 | openjdk-8 | 8u222-b10-1~deb9u1 |
| Low | DLA-2325-1 | openjdk-8 | 8u265-b01-0+deb9u1 |
| Low | DLA-2737-1 | openjdk-8 | 8u302-b08-1~deb9u1 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | DLA-2514-1 | flac | 1.3.2-2+deb9u1 |
| Low | DLA-2931-1 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 |
| Low | DLA-3044-1 | glib2.0 | 2.50.3-2+deb9u3 |
| Low | DLA-3006-1 | openjdk-8 | 8u332-ga-1~deb9u1 |
| Low | GHSA-w33c-445m-f8w7 | okio | 1.17.6 |
| Low | DLA-3058-1 | libsndfile | 1.0.27-3+deb9u3 |
| Low | DSA-4659-1 | git | 1:2.11.0-3+deb9u7 |
| Low | DSA-4539-1 | openssl | 1.1.0l-1~deb9u1 |
| Low | DSA-4540-1 | openssl1.0 | 1.0.2t-1~deb9u1 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqubestakaterVerified publisher | 0.10.3 | 6.7.6-community | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.