mbentley/omada-controller:4.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of mbentley/omada-controller
mbentley/omada-controller:4.3 resolved to f4e682274bed, scanned 14 Sept 2026: 709 findings, 17 critical, 5 on KEV; deployed by 2 charts, among them omada-controller and omada-controller.
Radar Score
709 findings on digest f4e682274bed · scanned 14 Sept 2026
KEV ×5 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
Findings for digest f4e682274bed as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-beans | 5.2.20.RELEASE |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-webmvc | 5.2.20.RELEASE |
| Critical | UBUNTU-CVE-2015-4852KEV | openjdk-8 | no fix listed |
| Critical | UBUNTU-CVE-2022-2068 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.20 |
| Critical | UBUNTU-CVE-2021-3711 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.13.2 |
| Critical | GHSA-v98j-7crc-wvrj | shiro-web | 1.7.1 |
| Critical | GHSA-v98j-7crc-wvrj | shiro-spring | 1.7.1 |
| Critical | UBUNTU-CVE-2022-1292 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.17 |
| Critical | GHSA-f6jp-j6w3-w9hm | shiro-core | 1.8.0 |
| Critical | UBUNTU-CVE-2025-27363KEV | freetype | 2.8.1-2ubuntu2.2+esm1 |
| Critical | UBUNTU-CVE-2025-14847KEV | mongodb | 1:3.6.3-0ubuntu1.4+esm2 |
| Critical | GHSA-p66x-2cv9-qq3v | commons-beanutils | 1.9.4 |
| Critical | GHSA-vv7r-c36w-3prj | commons-fileupload | 1.6.0 |
| Critical | UBUNTU-CVE-2024-47175 | cups | 2.2.7-1ubuntu2.10+esm6 |
| Critical | GHSA-8wx2-9q48-vm9r | spring-webmvc | 5.1.13.RELEASE |
| Critical | UBUNTU-CVE-2025-6965 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Critical | UBUNTU-CVE-2024-2961 | glibc | 2.27-3ubuntu1.6+esm2 |
| High | UBUNTU-CVE-2022-0778 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.15 |
| High | GHSA-4wrc-f8pq-fpqp | spring-web | 6.0.0 |
| High | GHSA-4cf5-xmhp-3xj7 | shiro-core | 1.9.1 |
| High | GHSA-4w82-r329-3q67 | jackson-databind | 2.9.10.3 |
| High | UBUNTU-CVE-2023-0286 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.21 |
| High | GHSA-g5vr-rgqm-vf78 | spring-webmvc | no fix listed |
| High | GHSA-72w9-fcj5-3fcg | shiro-core | 1.5.3 |
| High | GHSA-26vr-8j45-3r4w | jetty-server | 9.4.39 |
| High | GHSA-26gr-cvq3-qxgf | shiro-core | 1.5.2 |
| High | UBUNTU-CVE-2021-23840 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 |
| High | UBUNTU-CVE-2023-2650 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.23 |
| High | GHSA-hfrx-6qgj-fp6c | commons-fileupload | 1.5 |
| High | UBUNTU-CVE-2021-3712 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.13.2 |
| High | GHSA-2vgm-wxr3-6w2j | shiro-core | 1.6.0 |
| High | GHSA-q93h-jc49-78gg | jackson-databind | 2.9.10.4 |
| High | GHSA-p43x-xfjf-5jhr | jackson-databind | 2.9.10.4 |
| High | GHSA-w24x-87mr-4r23 | spring-data-mongodb | 3.3.5 |
| High | UBUNTU-CVE-2021-3449 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 |
| High | GHSA-m394-8rww-3jr7 | jetty-server | 9.4.37 |
| High | GHSA-6phf-73q6-gh87 | commons-beanutils | 1.9.4 |
| High | GHSA-9gph-22xh-8x98 | jackson-databind | 2.9.10.8 |
| High | UBUNTU-CVE-2024-2511 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 |
| High | UBUNTU-CVE-2024-3596 | krb5 | 1.16-2ubuntu0.4+esm3 |
| High | GHSA-h822-r4r5-v8jg | jackson-databind | 2.9.10 |
| High | GHSA-558x-2xjg-6232 | spring-expression | 5.2.20.RELEASE |
| High | GHSA-mph4-vhrx-mv67 | jackson-databind | 2.9.9.1 |
| High | GHSA-5ww9-j83m-q7qx | jackson-databind | 2.9.9 |
| High | UBUNTU-CVE-2022-4450 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.21 |
| High | GHSA-gww7-p5w4-wrfv | jackson-databind | 2.9.10.2 |
| High | GHSA-7cj4-gj8m-m2f7 | shiro-spring | 1.7.0 |
| High | GHSA-6fpp-rgj9-8rwc | jackson-databind | 2.9.9.2 |
| High | GHSA-288c-cq4h-88gq | jackson-databind | 2.9.10.7 |
| High | GHSA-hwj3-m3p6-hj38 | dom4j | 2.0.3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| omada-controllergeek-cookbookVerified publisher | 4.4.2 | 4.3 | 1 |
| omada-controllerandrelote-k8sVerified publisher | 4.5.0 | 4.3 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.