magento/magento-cloud-docker-opensearch:2.5-1.4.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of magento/magento-cloud-docker-opensearch

magento/magento-cloud-docker-opensearch:2.5-1.4.0 resolved to 59fb6f0f1461, scanned 14 Sept 2026: 109 findings, 1 critical; deployed by 1 chart, among them magento.

Radar Score

1,434103177

109 findings on digest 59fb6f0f1461 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.5-1.4.0resolves to	59fb6f0f1461	1 chart	8 days ago	103177	1,434

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

109 distinct on this digest

Findings for digest 59fb6f0f1461 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.32	2.0
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.21.9	3.25.5
Medium	GHSA-6phf-6h5g-97j2	sqlite-jdbc@3.32.3.2	3.41.2.2
Medium	GHSA-fh5r-crhr-qrrq	cxf-core@3.5.5	3.5.10
Medium	GHSA-qcwq-55hx-v3vh	snappy-java@1.1.8.2	1.1.10.1
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.86.Final	4.1.132.Final
Medium	GHSA-wrvw-hg22-4m67	protobuf-java@3.7.1	3.16.1
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.86.Final	4.1.94.Final
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.9	3.18.0
Medium	GHSA-j288-q9x7-2f5v	commons-lang@2.6	no fix listed
Medium	GHSA-4jq9-2xhw-jpx7	json@20220924	20231013
Medium	GHSA-xjp4-hw94-mvp5	commons-configuration2@2.1.1	2.10.1
Medium	GHSA-cgp8-4m63-fhh5	commons-net@3.6	3.9.0
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.11.0	2.14.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.86.Final	4.1.135.Final
Medium	GHSA-3vqj-43w4-2q58	json@20220924	20230227
Medium	GHSA-9w38-p64v-xpmv	commons-configuration2@2.1.1	2.10.1
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.14.1	2.18.8
Medium	GHSA-wxqc-pxw9-g2p8	spring-expression@5.3.22	5.3.27
Medium	GHSA-493p-pfq6-5258	json-smart@2.4.7	2.4.9
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.14.1	2.18.8
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.86.Final	4.1.124.Final
Medium	GHSA-55g7-9cwv-5qfv	snappy-java@1.1.8.2	1.1.10.4
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.14.1	2.15.0
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.79.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.86.Final	4.1.133.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.79.Final	4.1.136.Final
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.86.Final	4.1.135.Final
Medium	GHSA-g5ww-5jh7-63cx	protobuf-java@3.7.1	3.16.3
Medium	GHSA-pqr6-cmr2-h8hf	snappy-java@1.1.8.2	1.1.10.1
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.0.2	3.7.1
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.2.3	2.2.6
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.1	2.25.4
Low	GHSA-v6w3-2prq-h95f	javax.el@3.0.0	no fix listed
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.79.Final	4.1.133.Final
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.8.2	1.1.10.1
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.7.1	3.16.3
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.0.2	3.9.2
Low	GHSA-cfxw-4h78-h7fw	dnsjava@2.1.7	3.6.0
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.79.Final	4.1.132.Final
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.3.22	5.3.26
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.79.Final	4.1.133.Final
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.86.Final	4.1.137.Final
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.7.1	3.16.3
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.79.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.1	2.25.5
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.86.Final	4.1.125.Final
Low	GHSA-jmp9-x22r-554x	spring-core@5.3.22	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.86.Final	4.1.133.Final

Used by

1 chart

Chart	Version	Tag	Containers
magentomagento	3.2.3	2.5-1.4.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.