StackRadar

martinaif/backstage-k8s-demo-backend:test1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of martinaif/backstage-k8s-demo-backend

martinaif/backstage-k8s-demo-backend:test1 resolved to 43bc40a3da0e, scanned 14 Sept 2026: 417 findings, 0 critical, 3 on KEV; deployed by 2 charts, among them backstage and backstage.

Radar Score

6,676017140260

417 findings on digest 43bc40a3da0e · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
test1resolves to43bc40a3da0e2 chartsyesterday0171402606,676

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

417 distinct on this digest

Findings for digest 43bc40a3da0e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-q6wq-5p59-983wparse-url@5.0.16.0.1
LowGHSA-27p8-2357-5qqvxmldom@0.1.27no fix listed
LowGHSA-4w3w-2rp5-g8jmxmldom@0.1.27no fix listed
LowGHSA-c7q8-3ch8-vqpvxmldom@0.1.27no fix listed
LowGHSA-w2rr-34g9-rvrjxmldom@0.1.27no fix listed
LowGHSA-q67f-28xg-22rwnode-forge@0.9.01.4.0
LowGHSA-jv3g-j58f-9mq9jose@1.27.11.28.2
LowGHSA-8344-3jmq-59r6xmldom@0.1.27no fix listed
LowDSA-4822-1p11-kit@0.23.15-20.23.15-2+deb10u1
LowGHSA-hmw2-7cc7-3qxxform-data@2.3.32.5.6
LowGHSA-7r86-cg39-jmmjminimatch@3.0.43.1.3
LowDSA-4786-1libexif@0.6.21-5.1+deb10u40.6.21-5.1+deb10u5
LowGHSA-952p-6rrq-rcjvmicromatch@4.0.24.0.8
LowGHSA-8qq5-rm4j-mr97tar@2.2.27.5.3
LowDLA-3363-1pcre2@10.32-510.32-5+deb10u1
LowGHSA-776f-qx25-q3ccxml2js@0.4.230.5.0
LowDLA-3239-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u5
LowGHSA-fvcv-3m26-pcqxaxios@0.20.00.31.0
LowDSA-5147-1dpkg@1.19.71.19.8
LowDLA-3682-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u5
LowGHSA-jpp7-7chh-cf67parse-url@5.0.16.0.1
LowDSA-4919-1lz4@1.8.3-11.8.3-1+deb10u1
LowGHSA-23c5-xmqv-rm74minimatch@3.0.43.1.4
LowGHSA-ppp5-5v6c-4jwpnode-forge@0.9.01.4.0
LowGHSA-wh4c-j3r5-mjhpxmldom@0.1.27no fix listed
LowGHSA-qpx9-hpmf-5gmwunderscore@1.11.01.13.8
LowGHSA-5379-r78w-42h2passport-saml@1.3.33.1.0
LowGHSA-mh99-v99m-4gvgbrace-expansion@1.1.111.1.17
LowGHSA-f794-r6xc-hf3vpassport-oauth2@1.5.01.6.1
LowGHSA-8fr3-hfg3-gpgpnode-forge@0.9.01.0.0
LowGHSA-8x88-c5mf-7j5wtar@2.2.27.5.18
LowDSA-4792-1openldap@2.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u4
LowGHSA-jchw-25xp-jwwcfollow-redirects@1.13.01.15.4
LowDLA-3626-1krb5@1.17-31.17-3+deb10u6
LowGHSA-pqw5-jmp5-px4vparse-url@5.0.18.1.0
LowGHSA-rv95-896h-c2vcexpress@4.17.14.19.2
LowGHSA-rq6q-wr2q-7pgp@backstage/plugin-scaffolder-backend@0.1.1-alpha.232.2.2
LowDSA-5174-1gnupg2@2.2.12-1+deb10u12.2.12-1+deb10u2
LowDSA-4933-1nettle@3.4.1-13.4.1-1+deb10u1
LowGHSA-c2c7-rcm5-vvqjpicomatch@2.2.22.3.2
LowDSA-4930-1libwebp@0.6.1-20.6.1-2+deb10u1
LowGHSA-2g4f-4pwh-qvx6ajv@6.12.46.14.0
LowGHSA-6chq-wfr3-2hj9axios@0.20.00.31.1
LowGHSA-p8p7-x288-28g6request@2.88.2no fix listed
LowGHSA-r6q2-hw4h-h46wtar@2.2.27.5.4
LowGHSA-2883-xcg3-v3hhjs-yaml@3.14.03.15.2
LowGHSA-xjpj-3mr7-gcpfhandlebars@4.7.64.7.9
LowGHSA-r292-9mhp-454mtar@2.2.27.5.21
LowGHSA-r4q5-vmmm-2653follow-redirects@1.13.01.16.0
LowDLA-3114-1mariadb-10.3@1:10.3.23-0+deb10u11:10.3.36-0+deb10u1

Used by

2 charts
ChartVersionTagContainers
backstagedeliveryheroVerified publisher0.1.15test11
backstagehelm-charts-nr0.1.15test11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.