library/tomcat:8.5.41-alpine container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/tomcat
library/tomcat:8.5.41-alpine resolved to 04feaf74f8bb, scanned 14 Sept 2026: 46 findings, 4 critical, 2 on KEV; deployed by 1 chart, among them tomcat.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
46 distinct on this digest
Findings for digest 04feaf74f8bb as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2020-15999KEV | freetype | 2.9.1-r3 |
| Critical | ALPINE-CVE-2019-8457 | sqlite | 3.28.0-r0 |
| Critical | GHSA-3p2h-wqq4-wf4h | tomcat-coyote | no fix listed |
| Critical | GHSA-m7jv-hq7h-mq7c | tomcat-websocket | 8.5.57 |
| High | GHSA-vf77-8h7g-gghp | tomcat-coyote | 8.5.56 |
| High | ALPINE-CVE-2021-23840 | openssl | 1.1.1j-r0 |
| High | GHSA-qppj-fm5r-hxr3KEV | tomcat-coyote | 8.5.94 |
| High | ALPINE-CVE-2021-3449 | openssl | 1.1.1k-r0 |
| High | GHSA-vvw4-rfwf-p6hx | tomcat-coyote | 8.5.60 |
| High | GHSA-7w75-32cg-r6g2 | tomcat-coyote | 8.5.99 |
| High | ALPINE-CVE-2019-12900 | bzip2 | 1.0.6-r7 |
| Medium | GHSA-f268-65qc-98vg | tomcat-coyote | 8.5.58 |
| Medium | ALPINE-CVE-2019-5018 | sqlite | 3.28.0-r0 |
| Medium | ALPINE-CVE-2019-14697 | musl | 1.1.20-r5 |
| Medium | ALPINE-CVE-2019-1551 | openssl | 1.1.1d-r2 |
| Medium | GHSA-f4qf-m5gf-8jm8 | tomcat-coyote | 8.5.64 |
| Medium | GHSA-wm9w-rjj3-j356 | tomcat-coyote | no fix listed |
| Medium | ALPINE-CVE-2020-28196 | krb5 | 1.15.5-r1 |
| Medium | ALPINE-CVE-2020-11655 | sqlite | 3.28.0-r3 |
| Medium | ALPINE-CVE-2021-23841 | openssl | 1.1.1j-r0 |
| Medium | GHSA-r29c-68gh-xp6x | tomcat-coyote | 9.0.118 |
| Medium | ALPINE-CVE-2020-1971 | openssl | 1.1.1i-r0 |
| Medium | ALPINE-CVE-2019-19244 | sqlite | 3.28.0-r2 |
| Medium | ALPINE-CVE-2019-16168 | sqlite | 3.28.0-r1 |
| Medium | ALPINE-CVE-2019-2201 | libjpeg-turbo | 1.5.3-r6 |
| Medium | GHSA-7jqf-v358-p8g7 | tomcat-coyote | no fix listed |
| Medium | ALPINE-CVE-2019-1549 | openssl | 1.1.1d-r0 |
| Medium | GHSA-r6j3-px5g-cq3x | tomcat-coyote | 8.5.94 |
| Medium | ALPINE-CVE-2018-14498 | libjpeg-turbo | 1.5.3-r5 |
| Medium | GHSA-25xr-qj8w-c4vf | tomcat-coyote | no fix listed |
| Medium | GHSA-4j3c-42xv-3f84 | tomcat-coyote | no fix listed |
| Medium | GHSA-v682-8vv8-vpwr | tomcat-websocket | 8.5.99 |
| Medium | ALPINE-CVE-2019-19242 | sqlite | 3.28.0-r2 |
| Medium | ALPINE-CVE-2019-5094 | e2fsprogs | 1.44.5-r1 |
| Low | ALPINE-CVE-2018-1000654 | libtasn1 | 4.14-r0 |
| Low | GHSA-g8pj-r55q-5c2v | tomcat-util | 8.5.94 |
| Low | ALPINE-CVE-2019-5188 | e2fsprogs | 1.44.5-r2 |
| Low | ALPINE-CVE-2020-14363 | libx11 | 1.6.12-r0 |
| Low | GHSA-563x-q5rq-57qp | tomcat-coyote | 9.0.116 |
| Low | ALPINE-CVE-2019-1563 | openssl | 1.1.1d-r0 |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-coyote | no fix listed |
| Low | GHSA-qq5r-98hh-rxc9 | tomcat-coyote | 9.0.113 |
| Low | ALPINE-CVE-2021-23839 | openssl | 1.1.1j-r0 |
| Low | ALPINE-CVE-2020-14344 | libx11 | 1.6.10-r0 |
| Low | ALPINE-CVE-2019-1547 | openssl | 1.1.1d-r0 |
| Low | ALPINE-CVE-2020-28928 | musl | 1.1.20-r6 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| tomcatkubesphereVerified publisher | 0.4.0-r1 | 8.5.41-alpine | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.