library/sonarqube:9.1.0-datacenter-search container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:9.1.0-datacenter-search resolved to 7e43ff493a47, scanned 14 Sept 2026: 186 findings, 8 critical, 3 on KEV; deployed by 1 chart, among them sonarqube-dce.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 7e43ff493a47 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-4jrv-ppp4-jm57 | gson | 2.8.9 |
| Medium | GHSA-3f7h-mf4q-vrm4 | woodstox-core | 5.4.0 |
| Medium | GHSA-24rp-q3w6-vc56 | postgresql | 42.2.28 |
| Medium | ALPINE-CVE-2022-25235 | expat | 2.4.5-r0 |
| Medium | ALPINE-CVE-2022-22822 | expat | 2.4.3-r0 |
| Medium | ALPINE-CVE-2022-25315 | expat | 2.4.5-r0 |
| Medium | ALPINE-CVE-2022-23852 | expat | 2.4.4-r0 |
| Medium | ALPINE-CVE-2022-4304 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2022-22823 | expat | 2.4.3-r0 |
| Medium | ALPINE-CVE-2022-22824 | expat | 2.4.3-r0 |
| Medium | GHSA-j8wc-gxx9-82hx | xmlsec | 2.1.7 |
| Medium | ALPINE-CVE-2021-45960 | expat | 2.4.3-r0 |
| Medium | GHSA-9vjp-v76f-g363 | netty-codec | 4.1.68.Final |
| Medium | ALPINE-CVE-2022-27404 | freetype | 2.10.4-r2 |
| Medium | GHSA-grg4-wf29-r9vv | netty-codec | 4.1.68.Final |
| Medium | GHSA-g5mm-vmx4-3rg7 | spring-context | 5.3.19 |
| Medium | ALPINE-CVE-2022-28391 | busybox | 1.33.1-r7 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | ALPINE-CVE-2022-25314 | expat | 2.4.5-r0 |
| Medium | ALPINE-CVE-2022-22826 | expat | 2.4.3-r0 |
| Medium | ALPINE-CVE-2022-22827 | expat | 2.4.3-r0 |
| Medium | ALPINE-CVE-2023-0215 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2021-46143 | expat | 2.4.3-r0 |
| Medium | ALPINE-CVE-2022-22825 | expat | 2.4.3-r0 |
| Medium | ALPINE-CVE-2022-23990 | expat | 2.4.4-r0 |
| Medium | ALPINE-CVE-2021-46848 | libtasn1 | 4.17.0-r1 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 1.1.1t-r1 |
| Medium | GHSA-3p86-9955-h393 | org.eclipse.jgit | 5.13.3.202401111512-r |
| Medium | GHSA-7rpj-hg47-cx62 | h2 | 2.0.202 |
| Medium | ALPINE-CVE-2022-27406 | freetype | 2.10.4-r3 |
| Medium | GHSA-98qh-xjc8-98pq | postgresql | 42.7.11 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-xmc8-26q4-qjhx | jackson-dataformat-cbor | 2.11.4 |
| Medium | GHSA-668q-qrv7-99fm | logback-core | 1.2.9 |
| Medium | ALPINE-CVE-2022-27405 | freetype | 2.10.4-r3 |
| Medium | ALPINE-CVE-2022-40674 | expat | 2.4.9-r0 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | GHSA-mvr2-9pj6-7w5j | guava | 24.1.1-android |
| Medium | GHSA-v7wg-cpwc-24m4 | postgresql | 42.2.25 |
| Medium | ALPINE-CVE-2022-43680 | expat | 2.5.0-r0 |
| Medium | GHSA-fg2v-w576-w4v3 | json-smart | 1.3.3 |
| Medium | ALPINE-CVE-2022-25313 | expat | 2.4.5-r0 |
| Medium | GHSA-hh26-6xwr-ggv7 | spring-beans | 5.3.20 |
| Medium | GHSA-c5hg-mr8r-f6jp | hazelcast | 4.2.6 |
| Medium | GHSA-r38f-c4h4-hqq2 | postgresql | 42.2.26 |
| Medium | GHSA-wx5j-54mm-rqqq | netty-codec-http | 4.1.71.Final |
| Medium | GHSA-wrvw-hg22-4m67 | protobuf-java | 3.16.1 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqube-dcesonarqubeVerified publisher | 0.1.2+121 | 9.1.0-datacenter-search | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.