StackRadar

martinaif/backstage-k8s-demo-backend:test1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of martinaif/backstage-k8s-demo-backend

martinaif/backstage-k8s-demo-backend:test1 resolved to 43bc40a3da0e, scanned 14 Sept 2026: 417 findings, 0 critical, 3 on KEV; deployed by 2 charts, among them backstage and backstage.

Radar Score

6,676017140260

417 findings on digest 43bc40a3da0e · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
test1resolves to43bc40a3da0e2 chartsyesterday0171402606,676

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

417 distinct on this digest

Findings for digest 43bc40a3da0e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-cwx2-736x-mf6wobject-path@0.11.40.11.5
MediumGHSA-72xf-g2v4-qvf3tough-cookie@2.5.04.1.3
MediumGHSA-5955-9wpr-37jhtar@2.2.24.4.18
MediumDSA-4920-1libx11@2:1.6.7-12:1.6.7-1+deb10u2
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@4.1.04.1.1
MediumGHSA-79jw-6wg7-r9g4mixme@0.3.50.5.1
MediumDSA-4944-1krb5@1.17-31.17-3+deb10u2
MediumDSA-4881-1curl@7.64.0-4+deb10u17.64.0-4+deb10u2
MediumGHSA-grv7-fg5c-xmjgbraces@2.3.23.0.3
MediumGHSA-44c6-4v22-4mhxsemver-regex@2.0.03.1.3
MediumDSA-5119-1subversion@1.10.4-1+deb10u11.10.4-1+deb10u3
MediumGHSA-pp7h-53gx-mx7rbl@1.2.21.2.3
MediumGHSA-3h5v-q93c-6h6qws@6.2.16.2.3
MediumDSA-4942-1systemd@241-7~deb10u4241-7~deb10u8
MediumGHSA-pjwm-pj3p-43mvaxios@0.20.00.32.0
MediumGHSA-43f8-2h32-f4cjhosted-git-info@2.8.82.8.9
MediumGHSA-2fc9-xpp8-2g9h@backstage/backend-common@0.1.1-alpha.230.19.10
MediumGHSA-jr5f-v2jv-69x6axios@0.20.00.30.0
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-4p35-cfcx-8653parse-url@5.0.16.0.1
MediumGHSA-4w2v-q235-vp99axios@0.20.00.21.1
MediumGHSA-5gfm-wpxj-wjgqnode-forge@0.9.01.3.2
MediumGHSA-257v-vj4p-3w2hcolor-string@1.5.31.5.5
MediumGHSA-x4jg-mjrx-434gnode-forge@0.9.01.3.0
MediumDSA-4807-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u4
MediumGHSA-f23m-r3pf-42rhlodash@4.17.154.18.0
MediumGHSA-f23m-r3pf-42rhlodash-es@4.17.154.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.154.17.23
MediumGHSA-xxjr-mmjv-4gpglodash-es@4.17.154.17.23
MediumGHSA-4jv9-3563-23j3knex@0.21.52.4.0
MediumGHSA-c7qv-q95q-8v27http-proxy-middleware@0.19.22.0.7
MediumGHSA-2v35-w6hq-6mfwxmldom@0.1.27no fix listed
MediumGHSA-6fc8-4gx4-v693ws@6.2.16.2.2
MediumDLA-3530-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u6
MediumDLA-3213-1krb5@1.17-31.17-3+deb10u5
MediumGHSA-v88g-cgmw-v5xwajv@5.5.26.12.3
MediumDLA-3613-1curl@7.64.0-4+deb10u17.64.0-4+deb10u7
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-8cj5-5rvv-wf4vtar-fs@2.0.12.1.3
MediumGHSA-3mfm-83xf-c92rhandlebars@4.7.64.7.9
MediumGHSA-xhpv-hc6g-r9c6handlebars@4.7.64.7.9
MediumGHSA-5fg8-2547-mr8qxmldom@0.1.27no fix listed
MediumDLA-3175-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u4
MediumGHSA-4mxg-3p6v-xgq3passport-saml@1.3.3no fix listed
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-p92q-9vqr-4j8vaxios@0.20.00.32.0
MediumGHSA-vj76-c3g6-qr5vtar-fs@2.0.12.1.4
MediumGHSA-pfrx-2q88-qq97got@11.6.011.8.5
MediumDSA-4776-1mariadb-10.3@1:10.3.23-0+deb10u11:10.3.25-0+deb10u1

Used by

2 charts
ChartVersionTagContainers
backstagedeliveryheroVerified publisher0.1.15test11
backstagehelm-charts-nr0.1.15test11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.