martinaif/backstage-k8s-demo-backend:test1 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of martinaif/backstage-k8s-demo-backend
martinaif/backstage-k8s-demo-backend:test1 resolved to 43bc40a3da0e, scanned 14 Sept 2026: 417 findings, 0 critical, 3 on KEV; deployed by 2 charts, among them backstage and backstage.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
417 distinct on this digest
Findings for digest 43bc40a3da0e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-q6wq-5p59-983w | parse-url | 6.0.1 |
| Low | GHSA-27p8-2357-5qqv | xmldom | no fix listed |
| Low | GHSA-4w3w-2rp5-g8jm | xmldom | no fix listed |
| Low | GHSA-c7q8-3ch8-vqpv | xmldom | no fix listed |
| Low | GHSA-w2rr-34g9-rvrj | xmldom | no fix listed |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | GHSA-jv3g-j58f-9mq9 | jose | 1.28.2 |
| Low | GHSA-8344-3jmq-59r6 | xmldom | no fix listed |
| Low | DSA-4822-1 | p11-kit | 0.23.15-2+deb10u1 |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | DSA-4786-1 | libexif | 0.6.21-5.1+deb10u5 |
| Low | GHSA-952p-6rrq-rcjv | micromatch | 4.0.8 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | DLA-3363-1 | pcre2 | 10.32-5+deb10u1 |
| Low | GHSA-776f-qx25-q3cc | xml2js | 0.5.0 |
| Low | DLA-3239-1 | git | 1:2.20.1-2+deb10u5 |
| Low | GHSA-fvcv-3m26-pcqx | axios | 0.31.0 |
| Low | DSA-5147-1 | dpkg | 1.19.8 |
| Low | DLA-3682-1 | ncurses | 6.1+20181013-2+deb10u5 |
| Low | GHSA-jpp7-7chh-cf67 | parse-url | 6.0.1 |
| Low | DSA-4919-1 | lz4 | 1.8.3-1+deb10u1 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-ppp5-5v6c-4jwp | node-forge | 1.4.0 |
| Low | GHSA-wh4c-j3r5-mjhp | xmldom | no fix listed |
| Low | GHSA-qpx9-hpmf-5gmw | underscore | 1.13.8 |
| Low | GHSA-5379-r78w-42h2 | passport-saml | 3.1.0 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-f794-r6xc-hf3v | passport-oauth2 | 1.6.1 |
| Low | GHSA-8fr3-hfg3-gpgp | node-forge | 1.0.0 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | DSA-4792-1 | openldap | 2.4.47+dfsg-3+deb10u4 |
| Low | GHSA-jchw-25xp-jwwc | follow-redirects | 1.15.4 |
| Low | DLA-3626-1 | krb5 | 1.17-3+deb10u6 |
| Low | GHSA-pqw5-jmp5-px4v | parse-url | 8.1.0 |
| Low | GHSA-rv95-896h-c2vc | express | 4.19.2 |
| Low | GHSA-rq6q-wr2q-7pgp | @backstage/ | 2.2.2 |
| Low | DSA-5174-1 | gnupg2 | 2.2.12-1+deb10u2 |
| Low | DSA-4933-1 | nettle | 3.4.1-1+deb10u1 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 2.3.2 |
| Low | DSA-4930-1 | libwebp | 0.6.1-2+deb10u1 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | GHSA-6chq-wfr3-2hj9 | axios | 0.31.1 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-xjpj-3mr7-gcpf | handlebars | 4.7.9 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-r4q5-vmmm-2653 | follow-redirects | 1.16.0 |
| Low | DLA-3114-1 | mariadb-10.3 | 1:10.3.36-0+deb10u1 |