StackRadar

natsio/nats-box:0.19.2 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 4 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of natsio/nats-box

natsio/nats-box:0.19.2 resolved to 8031d190c7ee, scanned 14 Sept 2026: 156 findings, 0 critical; deployed by 4 charts, among them rocketchat, glassflow-etl and gnp-stack.

Radar Score

1,6070124131

156 findings on digest 8031d190c7ee · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.19.2resolves to8031d190c7ee3 charts5 days ago01241311,607

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

131 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 8031d190c7ee as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2025-69420openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2026-27135nghttp2@1.65.0-r01.68.1
LowGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.31.00.52.0
LowGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.31.00.52.0
LowALPINE-CVE-2026-14456openssl@3.5.4-r03.5.8-r0
LowALPINE-CVE-2026-9076openssl@3.5.4-r03.5.7-r0
LowGHSA-52jh-2xxh-pwh6github.com/nats-io/nats-server/v2@v2.10.232.11.14
LowALPINE-CVE-2026-32316jq@1.8.0-r01.8.2-r0
LowGHSA-vprv-35vv-q339github.com/nats-io/nats-server/v2@v2.10.232.11.15
LowALPINE-CVE-2026-63072openssl@3.5.4-r03.5.8-r0
LowALPINE-CVE-2026-45445openssl@3.5.4-r03.5.7-r0
LowGHSA-pq2q-rcw4-3hr6github.com/nats-io/nats-server/v2@v2.10.232.11.14
LowGHSA-v722-jcv5-w7mcgithub.com/nats-io/nats-server/v2@v2.10.232.11.15
LowALPINE-CVE-2026-31789openssl@3.5.4-r03.5.6-r0
LowALPINE-CVE-2025-69419openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2026-54874openssl@3.5.4-r03.5.8-r0
LowALPINE-CVE-2026-42766openssl@3.5.4-r03.5.7-r0
LowALPINE-CVE-2026-63075openssl@3.5.4-r03.5.8-r0
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.31.00.52.0
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.31.00.52.0
LowALPINE-CVE-2026-33630c-ares@1.34.5-r01.34.8-r0
LowGHSA-cfpf-hrx2-8rv6github.com/expr-lang/expr@v1.17.61.17.7
LowGHSA-x6g4-f6q3-fqvvgithub.com/nats-io/nats-server/v2@v2.10.232.11.15
LowALPINE-CVE-2026-75803openssl@3.5.4-r03.5.8-r0
LowALPINE-CVE-2025-15468openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2026-40164jq@1.8.0-r01.8.2-r0
LowALPINE-CVE-2026-39979jq@1.8.0-r01.8.2-r0
LowGO-2026-4341stdlib@go1.25.21.24.12
LowALPINE-CVE-2026-2673openssl@3.5.4-r03.5.6-r0
LowALPINE-CVE-2026-42767openssl@3.5.4-r03.5.7-r0
LowALPINE-CVE-2026-5545curl@8.14.1-r28.14.1-r3
LowALPINE-CVE-2025-49014jq@1.8.0-r01.8.1-r0
LowALPINE-CVE-2026-63074openssl@3.5.4-r03.5.8-r0
LowGHSA-qrvq-68c2-7grwgithub.com/nats-io/nats-server/v2@v2.10.232.11.12
LowALPINE-CVE-2026-34181openssl@3.5.4-r03.5.7-r0
LowGHSA-jxxm-27vp-c3m5github.com/nats-io/nats-server/v2@v2.10.232.11.15
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.31.00.52.0
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.44.00.55.0
LowALPINE-CVE-2026-40200musl@1.2.5-r101.2.5-r12
LowALPINE-CVE-2025-62408c-ares@1.34.5-r01.34.6-r0
LowALPINE-CVE-2025-66199openssl@3.5.4-r03.5.5-r0
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.31.00.45.0
LowGHSA-8r68-gvr4-jh7jgithub.com/nats-io/nats-server/v2@v2.10.232.11.15
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.31.00.52.0
LowALPINE-CVE-2026-22796openssl@3.5.4-r03.5.5-r0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.31.00.45.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.31.00.52.0
LowGHSA-fcjp-h8cc-6879github.com/nats-io/nats-server/v2@v2.10.232.11.15
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.31.00.52.0

Used by

4 charts
ChartVersionTagContainers
rocketchatrocketchat-server7.0.20.19.21
glassflow-etlglassflowVerified publisher0.5.210.19.21
gnp-stackgnp-stack0.0.50.19.2unmeasured: HTTP 429 resolving manifest1
service-exampleservice-example-jt0.1.10.19.21

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.