library/sonarqube:8.2-community container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube

library/sonarqube:8.2-community resolved to a246bc64207e, scanned 14 Sept 2026: 258 findings, 10 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.

Radar Score

5,4601014108126

258 findings on digest a246bc64207e · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
8.2-communityresolves to	a246bc64207e	1 chart	5 days ago	1014108126	5,460

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

258 distinct on this digest

Findings for digest a246bc64207e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.41	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.41	8.5.51
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.11.1	2.12.3
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.17	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.41	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.41	no fix listed
High	GHSA-8489-44mv-ggj8	log4j-core@2.11.1	2.12.4
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.41	no fix listed
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.41	no fix listed
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.41	8.5.55
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.41	8.5.94
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.17	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.41	8.5.55
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.41	8.5.99
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.41	8.5.63
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.1	2.10.5.1
High	GHSA-53x6-4x5p-rrvv	commons-compress@1.18	1.19
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.32.Final	4.1.44
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
High	DSA-4777-1KEV	freetype@2.9.1-3+deb10u1	2.9.1-3+deb10u2
Medium	DSA-5169-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u3
Medium	DLA-3807-1	glibc@2.28-10	2.28-10+deb10u3
Medium	DSA-4963-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u7
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.5	2.8.9
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.18	1.21
Medium	DLA-3804-1	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u3
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.0.3	5.4.0
Medium	DSA-4845-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u5
Medium	DSA-5139-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u2
Medium	GHSA-crv7-7245-f45f	commons-compress@1.18	1.21
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.18	1.21
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.2.8	42.2.28
Medium	DLA-3449-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u5
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@8.5.41	8.5.60
Medium	DSA-5103-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u8
Medium	GHSA-9xcj-c8cr-8c3c	tomcat-embed-core@8.5.41	8.5.50
Medium	GHSA-xqfj-vm6h-2x34	commons-compress@1.18	1.21
Medium	DSA-5140-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u7
Medium	DSA-4860-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u6
Medium	DSA-4875-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u6
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.32.Final	4.1.46
Medium	DLA-3325-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u4
Medium	DSA-5111-1	zlib@1:1.2.11.dfsg-1	1:1.2.11.dfsg-1+deb10u1
Medium	GHSA-jgwr-3qm3-26f3	tomcat-embed-core@8.5.41	8.5.61
Medium	DSA-4855-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u5
Medium	GHSA-j8wc-gxx9-82hx	xmlsec@2.1.4	2.1.7

Used by

1 chart

Chart	Version	Tag	Containers
sonarqubewebencryptor	6.7.3	8.2-community	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.