martinaif/backstage-k8s-demo-backend:test1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of martinaif/backstage-k8s-demo-backend

martinaif/backstage-k8s-demo-backend:test1 resolved to 43bc40a3da0e, scanned 14 Sept 2026: 417 findings, 0 critical, 3 on KEV; deployed by 2 charts, among them backstage and backstage.

Radar Score

6,676017140260

417 findings on digest 43bc40a3da0e · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
test1resolves to	43bc40a3da0e	2 charts	yesterday	017140260	6,676

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

260 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 43bc40a3da0e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-v39p-96qg-c8rf	object-path@0.11.4	0.11.6
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-39v3-f278-vj3g	@backstage/plugin-techdocs-backend@0.1.1-alpha.23	1.10.13
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	GHSA-cfm4-qjh2-4765	node-forge@0.9.0	1.3.0
Low	DLA-3614-1	python3.7@3.7.3-2+deb10u2	3.7.3-2+deb10u6
Low	DSA-5122-1	gzip@1.9-3	1.9-3+deb10u1
Low	DSA-5123-1	xz-utils@5.2.4-1	5.2.4-1+deb10u1
Low	DSA-4882-1	openjpeg2@2.3.0-2+deb10u1	2.3.0-2+deb10u2
Low	GHSA-62hf-57xw-28j9	axios@0.20.0	0.31.1
Low	GHSA-hhhv-q57g-882q	jose@1.27.1	2.0.7
Low	GHSA-x6wf-f3px-wcqx	xmldom@0.1.27	no fix listed
Low	DSA-5073-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u2
Low	GHSA-34x7-hfp2-rc4v	tar@2.2.2	7.5.7
Low	GHSA-mq66-vcfc-8246	mercurial@4.8.2	4.9
Low	GHSA-38fc-wpqx-33j7	trim-off-newlines@1.0.1	1.0.3
Low	GHSA-3g43-6gmg-66jw	axios@0.20.0	0.31.1
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.13.0	1.15.6
Low	GHSA-ph9p-34f9-6g65	tmp@0.2.1	0.2.6
Low	GHSA-554w-wpv2-vw27	node-forge@0.9.0	1.3.2
Low	DSA-4795-1	krb5@1.17-3	1.17-3+deb10u1
Low	GHSA-hfxv-24rg-xrqf	axios@0.20.0	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.20.0	0.32.0
Low	DLA-3288-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u4
Low	DLA-3651-1	postgresql-11@11.7-0+deb10u1	11.22-0+deb10u1
Low	GHSA-mp6q-xf9x-fwf7	apollo-server@2.16.1	no fix listed
Low	GHSA-w7fj-336r-vw49	@backstage/plugin-auth-backend@0.1.1-alpha.23	0.4.9
Low	DSA-5087-1	cyrus-sasl2@2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-9cx6-37pm-9jff	handlebars@4.7.6	4.7.9
Low	GHSA-pw2r-vq6v-hr8c	follow-redirects@1.13.0	1.14.8
Low	GHSA-f5x3-32g6-xq36	tar@2.2.2	6.2.1
Low	GHSA-5m6q-g25r-mvwx	node-forge@0.9.0	1.4.0
Low	GHSA-pmwg-cvhr-8vh7	axios@0.20.0	0.31.1
Low	GHSA-qffp-2rhf-9h96	tar@2.2.2	7.5.10
Low	GHSA-j759-j44w-7fr8	xmldom@0.1.27	no fix listed
Low	DSA-5142-1	libxml2@2.9.4+dfsg1-7+b3	2.9.4+dfsg1-7+deb10u4
Low	GHSA-58f5-hfqc-jgch	jose@1.27.1	1.28.1
Low	DSA-5032-1	djvulibre@3.5.27.1-10	3.5.27.1-10+deb10u1
Low	GHSA-23hp-3jrh-7fpw	tar@2.2.2	7.5.19
Low	GHSA-965w-775f-mr7g	xmldom@0.1.27	no fix listed
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.0	3.15.0
Low	GHSA-q6wq-5p59-983w	parse-url@5.0.1	6.0.1
Low	GHSA-27p8-2357-5qqv	xmldom@0.1.27	no fix listed
Low	GHSA-4w3w-2rp5-g8jm	xmldom@0.1.27	no fix listed
Low	GHSA-c7q8-3ch8-vqpv	xmldom@0.1.27	no fix listed
Low	GHSA-w2rr-34g9-rvrj	xmldom@0.1.27	no fix listed
Low	GHSA-q67f-28xg-22rw	node-forge@0.9.0	1.4.0
Low	GHSA-jv3g-j58f-9mq9	jose@1.27.1	1.28.2

Used by

2 charts

Chart	Version	Tag	Containers
backstagedeliveryheroVerified publisher	0.1.15	test1	1
backstagehelm-charts-nr	0.1.15	test1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.