massimolauri/wso2is:5.11.0-centos container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of massimolauri/wso2is

massimolauri/wso2is:5.11.0-centos resolved to e08abf0ce767, scanned 14 Sept 2026: 204 findings, 17 critical, 5 on KEV; deployed by 1 chart, among them is-pattern-1.

Radar Score

6,213172710555

204 findings on digest e08abf0ce767 · scanned 14 Sept 2026

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
5.11.0-centosresolves to	e08abf0ce767	1 chart	7 days ago	172710555	6,213

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

204 distinct on this digest

Findings for digest e08abf0ce767 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	pax-logging-log4j2@1.11.3	1.11.10
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.12.1	2.12.2
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.1.2.RELEASE	5.2.20.RELEASE
Critical	GHSA-599f-7c49-w659	commons-text@1.6	1.10.0
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.12.1	2.12.2
Critical	GHSA-7rjr-3q55-vv33KEV	pax-logging-log4j2@1.11.3	1.11.11
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.12.1	2.12.3
Critical	GHSA-p6xc-xr62-6r2g	pax-logging-log4j2@1.11.3	1.11.12
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.23	2.0
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.5.4	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.5.4	2.6.7.1
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	GHSA-ghgj-3xqr-6jfm	jetty-server@8.1.15.v20140411	9.2.9.v20150224
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.1.2.RELEASE	6.0.0
High	GHSA-8489-44mv-ggj8	pax-logging-log4j2@1.11.3	1.11.13
High	GHSA-8489-44mv-ggj8	log4j-core@2.12.1	2.12.4
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.9.2	2.9.10.3
High	GHSA-26vr-8j45-3r4w	jetty-server@8.1.15.v20140411	9.4.39
High	GHSA-76h9-2vwh-w278	mina-core@2.0.19	2.0.27
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.5.4	2.6.7.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.9.2	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.9.2	2.9.10.4
High	GHSA-vgg8-72f2-qm23	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-645p-88qh-w398	jackson-databind@2.5.4	2.6.7.3
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.23	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.9.2	2.9.10.8
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.9.2	2.9.10
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.5.4	2.6.7.3
High	GHSA-558x-2xjg-6232	spring-expression@5.1.2.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.5.4	2.6.7.3
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.5.4	2.6.7.3
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.5.4	2.7.9.5
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.9.2	2.9.10.2
High	GHSA-h592-38cm-4ggp	jackson-databind@2.5.4	2.6.7.3
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.5.4	2.7.9.6
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.5	2.10.5.1
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.9.2	2.9.10.8
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.9.2	2.9.10.8
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.5	2.8.9
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.9.2	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.9.2	2.9.10.4
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.2.1	6.4.0
Medium	GHSA-qr7j-h6gg-jmgc	jackson-databind@2.5.4	2.7.9.4

Used by

1 chart

Chart	Version	Tag	Containers
is-pattern-1wso2is-pattern1	5.11.0	5.11.0-centos	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.