linuxserver/cloud9:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of linuxserver/cloud9
linuxserver/cloud9:latest resolved to 45c5fe102ff3, scanned 14 Sept 2026: 763 findings, 10 critical, 3 on KEV; deployed by 1 chart, among them example-dev-tools.
Radar Score
11,6891026237490
763 findings on digest 45c5fe102ff3 · scanned 14 Sept 2026
KEV ×3 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
763 distinct on this digest
Findings for digest 45c5fe102ff3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-f8q6-p94x-37v3 | minimatch | 3.0.5 |
| Medium | UBUNTU-CVE-2023-52425 | expat | no fix listed |
| Medium | UBUNTU-CVE-2022-34903 | gnupg2 | 2.2.4-1ubuntu1.6 |
| Medium | GHSA-h86h-8ppg-mxmh | golang.org/ | 0.0.0-20210428140749-89ef3d95e781 |
| Medium | GHSA-hxm2-r34f-qmc5 | minimatch | 3.0.2 |
| Medium | GHSA-2m39-62fm-q8r3 | sshpk | 1.13.2 |
| Medium | UBUNTU-CVE-2011-10043 | perl | no fix listed |
| Medium | UBUNTU-CVE-2024-32004 | git | 1:2.17.1-1ubuntu0.18+esm1 |
| Medium | GHSA-jgqf-hwc5-hh37 | send | 0.11.1 |
| Medium | GHSA-72xf-g2v4-qvf3 | tough-cookie | 4.1.3 |
| Medium | UBUNTU-CVE-2022-2097 | openssl | 1.1.1-1ubuntu2.1~18.04.20 |
| Medium | GHSA-5955-9wpr-37jh | tar | 4.4.18 |
| Medium | UBUNTU-CVE-2024-33599 | glibc | 2.27-3ubuntu1.6+esm3 |
| Medium | UBUNTU-CVE-2026-4176 | perl | no fix listed |
| Medium | UBUNTU-CVE-2024-0553 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Medium | UBUNTU-CVE-2026-18924 | curl | no fix listed |
| Medium | GHSA-9qj9-36jm-prpv | fresh | 0.5.2 |
| Medium | UBUNTU-CVE-2023-5678 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm4 |
| Medium | UBUNTU-CVE-2022-1304 | e2fsprogs | 1.44.1-1ubuntu1.4 |
| Medium | UBUNTU-CVE-2025-9230 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm6 |
| Medium | GHSA-4xc9-xhrj-v574 | lodash | 4.17.11 |
| Medium | GHSA-fvqr-27wr-82fm | lodash | 4.17.5 |
| Medium | GHSA-69ch-w2m2-3vjp | golang.org/ | 0.3.8 |
| Medium | UBUNTU-CVE-2026-11856 | curl | 7.58.0-2ubuntu3.24+esm11 |
| Medium | UBUNTU-CVE-2017-20230 | perl | no fix listed |
| Medium | GHSA-q75g-2496-mxpp | parsejson | no fix listed |
| Medium | UBUNTU-CVE-2020-14155 | pcre3 | 2:8.39-9ubuntu0.1 |
| Medium | GHSA-mf6x-7mm4-x2g7 | stringstream | 0.0.6 |
| Medium | UBUNTU-CVE-2020-19189 | ncurses | 6.1-1ubuntu1.18.04.1+esm1 |
| Medium | GHSA-79mx-88w7-8f7q | validator | 2.0.0 |
| Medium | GHSA-pp7h-53gx-mx7r | bl | 1.2.3 |
| Medium | UBUNTU-CVE-2021-3671 | heimdal | 7.5.0+dfsg-1ubuntu0.1 |
| Medium | UBUNTU-CVE-2021-37750 | krb5 | 1.16-2ubuntu0.4 |
| Medium | GHSA-7mc5-chhp-fmc3 | negotiator | 0.6.1 |
| Medium | GHSA-3fwx-pjgw-3558 | github.com/ | 20.10.9 |
| Medium | GO-2026-4887 | github.com/ | no fix listed |
| Medium | GHSA-rcjv-mgp8-qvmr | go.opentelemetry.io/ | 0.44.0 |
| Medium | GHSA-rcjv-mgp8-qvmr | go.opentelemetry.io/ | 0.44.0 |
| Medium | UBUNTU-CVE-2023-0361 | gnutls28 | no fix listed |
| Medium | UBUNTU-CVE-2017-20229 | mawk | no fix listed |
| Medium | GHSA-9c2p-jw8p-f84v | sequelize | 3.20.0 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Medium | UBUNTU-CVE-2025-59375 | expat | 2.2.5-3ubuntu0.9+esm3 |
| Medium | UBUNTU-CVE-2024-8176 | expat | no fix listed |
| Medium | GHSA-c429-5p7v-vgjp | hoek | no fix listed |
| Medium | GHSA-r7qp-cfhv-p84w | engine.io | 3.6.1 |
| Medium | GHSA-f9cm-p3w6-xvr3 | qs | 1.0.0 |
| Medium | GHSA-2v7q-2xqx-f4q5 | sequelize | 3.0.0 |
| Medium | UBUNTU-CVE-2024-45492 | expat | 2.2.5-3ubuntu0.9+esm1 |
| Medium | GHSA-7xfp-9c55-5vqj | request | 2.68.0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| example-dev-toolsnoygal | 0.2.8 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.