library/sonarqube:9.1.0-datacenter-search container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube

library/sonarqube:9.1.0-datacenter-search resolved to 7e43ff493a47, scanned 14 Sept 2026: 186 findings, 8 critical, 3 on KEV; deployed by 1 chart, among them sonarqube-dce.

Radar Score

4,0518108088

186 findings on digest 7e43ff493a47 · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
9.1.0-datacenter-searchresolves to	7e43ff493a47	1 chart	8 days ago	8108088	4,051

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

186 distinct on this digest

Findings for digest 7e43ff493a47 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.7	5.3.18
Critical	GHSA-599f-7c49-w659	commons-text@1.8	1.10.0
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.11.1	2.12.3
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
High	ALPINE-CVE-2022-25236	expat@2.4.1-r0	2.4.5-r0
High	ALPINE-CVE-2022-0778	libretls@3.3.3p1-r2	3.3.3p1-r3
High	ALPINE-CVE-2022-0778	openssl@1.1.1l-r0	1.1.1n-r0
High	GHSA-8489-44mv-ggj8	log4j-core@2.11.1	2.12.4
High	ALPINE-CVE-2023-0286	openssl@1.1.1l-r0	1.1.1t-r0
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	GHSA-qwrx-45xf-jjf7	elasticsearch@7.14.1	7.17.13
High	GHSA-558x-2xjg-6232	spring-expression@5.3.7	5.3.17
High	ALPINE-CVE-2022-4450	openssl@1.1.1l-r0	1.1.1t-r0
Medium	GHSA-4jrv-ppp4-jm57	gson@2.6.2	2.8.9
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.0.3	5.4.0
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.2.19	42.2.28
Medium	ALPINE-CVE-2022-25235	expat@2.4.1-r0	2.4.5-r0
Medium	ALPINE-CVE-2022-22822	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-25315	expat@2.4.1-r0	2.4.5-r0
Medium	ALPINE-CVE-2022-23852	expat@2.4.1-r0	2.4.4-r0
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1l-r0	1.1.1t-r0
Medium	ALPINE-CVE-2022-22823	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-22824	expat@2.4.1-r0	2.4.3-r0
Medium	GHSA-j8wc-gxx9-82hx	xmlsec@2.1.4	2.1.7
Medium	ALPINE-CVE-2021-45960	expat@2.4.1-r0	2.4.3-r0
Medium	GHSA-9vjp-v76f-g363	netty-codec@4.1.49.Final	4.1.68.Final
Medium	ALPINE-CVE-2022-27404	freetype@2.10.4-r1	2.10.4-r2
Medium	GHSA-grg4-wf29-r9vv	netty-codec@4.1.49.Final	4.1.68.Final
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.3.7	5.3.19
Medium	ALPINE-CVE-2022-28391	busybox@1.33.1-r6	1.33.1-r7
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.11.4	2.12.6.1
Medium	ALPINE-CVE-2022-25314	expat@2.4.1-r0	2.4.5-r0
Medium	ALPINE-CVE-2022-22826	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-22827	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1l-r0	1.1.1t-r0
Medium	ALPINE-CVE-2021-46143	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-22825	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-23990	expat@2.4.1-r0	2.4.4-r0
Medium	ALPINE-CVE-2021-46848	libtasn1@4.17.0-r0	4.17.0-r1
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1l-r0	1.1.1t-r1
Medium	GHSA-3p86-9955-h393	org.eclipse.jgit@5.11.0.202103091610-r	5.13.3.202401111512-r
Medium	GHSA-7rpj-hg47-cx62	h2@1.4.199	2.0.202
Medium	ALPINE-CVE-2022-27406	freetype@2.10.4-r1	2.10.4-r3
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.2.19	42.7.11
Medium	GHSA-7r82-7xv7-xcpj	httpclient@4.5.10	4.5.13

Used by

1 chart

Chart	Version	Tag	Containers
sonarqube-dcesonarqubeVerified publisher	0.1.2+121	9.1.0-datacenter-search	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.