StackRadar

lightbend/spark-history-server:2.4.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of lightbend/spark-history-server

lightbend/spark-history-server:2.4.0 resolved to 0bedf37f428a, scanned 14 Sept 2026: 166 findings, 8 critical; deployed by 1 chart, among them spark-history-server.

Radar Score

4,88282310431

166 findings on digest 0bedf37f428a · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.4.0resolves to0bedf37f428a1 chart5 days ago823104314,882

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

166 distinct on this digest

Findings for digest 0bedf37f428a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
CriticalGHSA-2qrg-x229-3v8qlog4j@1.2.17no fix listed
CriticalGHSA-65fg-84f6-3jq3log4j@1.2.17no fix listed
CriticalGHSA-mjmj-j48q-9wg2snakeyaml@1.152.0
CriticalGHSA-f7vh-qwp3-x37mlog4j@1.2.17no fix listed
CriticalGHSA-rfx6-vp9g-rh7vjackson-databind@2.4.02.7.9.2
CriticalGHSA-w9p3-5cr8-m3jjlog4j@1.2.17no fix listed
CriticalALPINE-CVE-2019-8457sqlite@3.24.0-r03.25.3-r1
CriticalGHSA-qxxx-2pp7-5hmxjackson-databind@2.4.02.6.7.1
HighGHSA-fp5r-v3w9-4333log4j@1.2.17no fix listed
HighGHSA-4w82-r329-3q67jackson-databind@2.4.02.6.7.4
HighGHSA-26vr-8j45-3r4wjetty-server@9.3.24.v201806059.4.39
HighGHSA-cggj-fvv3-cqwvjackson-databind@2.4.02.6.7.5
HighGHSA-q93h-jc49-78ggjackson-databind@2.4.02.7.9.7
HighGHSA-p43x-xfjf-5jhrjackson-databind@2.4.02.7.9.7
HighGHSA-645p-88qh-w398jackson-databind@2.4.02.6.7.3
HighGHSA-gwcr-j4wh-j3cqjetty-servlets@9.3.24.v201806059.4.41
HighGHSA-rvwf-54qp-4r6vsnakeyaml@1.151.26
HighGHSA-9gph-22xh-8x98jackson-databind@2.4.02.6.7.5
HighGHSA-h822-r4r5-v8jgjackson-databind@2.4.02.6.7.3
HighGHSA-c8hm-7hpq-7jhgjackson-databind@2.4.02.6.7.3
HighGHSA-mph4-vhrx-mv67jackson-databind@2.4.02.6.7.3
HighGHSA-5ww9-j83m-q7qxjackson-databind@2.4.02.6.7.3
HighGHSA-4gq5-ch57-c2mgjackson-databind@2.4.02.7.9.5
HighGHSA-phg2-9c5g-m4q7spark-core_2.11@2.4.0no fix listed
HighGHSA-gww7-p5w4-wrfvjackson-databind@2.4.02.6.7.4
HighGHSA-h592-38cm-4ggpjackson-databind@2.4.02.6.7.3
HighGHSA-6fpp-rgj9-8rwcjackson-databind@2.4.02.7.9.6
HighGHSA-288c-cq4h-88gqjackson-databind@2.6.7.12.6.7.4
HighALPINE-CVE-2019-12900bzip2@1.0.6-r61.0.6-r7
HighGHSA-cqqj-4p63-rrmmnetty@3.9.9.Finalno fix listed
HighGHSA-5r5r-6hpj-8gg9jackson-databind@2.4.02.9.10.8
MediumGHSA-f9xh-2qgp-cq57jackson-databind@2.4.02.6.7.5
MediumGHSA-m6x4-97wx-4q27jackson-databind@2.4.02.9.10.8
MediumALPINE-CVE-2018-20346sqlite@3.24.0-r03.25.3-r0
MediumGHSA-fqwf-pjwf-7vqvjackson-databind@2.4.02.6.7.4
MediumGHSA-mc84-pj99-q6hhcommons-compress@1.8.11.21
MediumGHSA-qr7j-h6gg-jmgcjackson-databind@2.4.02.7.9.4
MediumGHSA-mx7p-6679-8g3qjackson-databind@2.4.02.6.7.3
MediumGHSA-crv7-7245-f45fcommons-compress@1.8.11.21
MediumGHSA-r3gr-cxrf-hg25jackson-databind@2.4.02.9.10.8
MediumGHSA-gjmw-vf9h-g25vjackson-databind@2.4.02.6.7.3
MediumGHSA-h3cw-g4mq-c5x2jackson-databind@2.4.02.9.10.6
MediumGHSA-7hfm-57qf-j43qcommons-compress@1.8.11.21
MediumGHSA-85cw-hj65-qqv9jackson-databind@2.4.02.6.7.3
MediumGHSA-fmmc-742q-jg75jackson-databind@2.4.02.6.7.3
MediumGHSA-gwp4-hfv6-p7hwjackson-databind@2.4.02.6.7.3
MediumGHSA-xqfj-vm6h-2x34commons-compress@1.8.11.21
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.4.02.8.11.5
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.4.02.9.10.8
MediumGHSA-gx2c-fvhc-ph4jhadoop-common@2.7.32.10.2

Used by

1 chart
ChartVersionTagContainers
spark-history-servercloudnativeapp1.0.02.4.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.