onosproject/onos:2.2.1 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of onosproject/onos

onosproject/onos:2.2.1 resolved to 44914a8d4b3f, scanned 14 Sept 2026: 659 findings, 21 critical, 7 on KEV; deployed by 1 chart, among them onos.

Radar Score

12,9272134270334

659 findings on digest 44914a8d4b3f · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.2.1resolves to	44914a8d4b3f	1 chart	5 days ago	2134270334	12,927

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

High findings

34 distinct on this digest

High: findings whose contribution to the Radar Score is 40–69. Show every band

Findings for digest 44914a8d4b3f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	UBUNTU-CVE-2022-25236	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4
High	UBUNTU-CVE-2020-36222	openldap@2.4.45+dfsg-1ubuntu1.4	2.4.45+dfsg-1ubuntu1.9
High	UBUNTU-CVE-2020-36227	openldap@2.4.45+dfsg-1ubuntu1.4	2.4.45+dfsg-1ubuntu1.9
High	UBUNTU-CVE-2022-0778	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.15
High	GHSA-8489-44mv-ggj8	pax-logging-log4j2@1.11.4	1.11.13
High	GHSA-8489-44mv-ggj8	log4j-core@2.13.0	2.17.1
High	UBUNTU-CVE-2021-27212	openldap@2.4.45+dfsg-1ubuntu1.4	2.4.45+dfsg-1ubuntu1.10
High	UBUNTU-CVE-2019-9511	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	UBUNTU-CVE-2023-0286	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.21
High	UBUNTU-CVE-2024-2398	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm4
High	GHSA-26vr-8j45-3r4w	jetty-server@9.4.22.v20191022	9.4.39
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.1
High	UBUNTU-CVE-2021-23840	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.8
High	UBUNTU-CVE-2023-2650	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23
High	GHSA-hfrx-6qgj-fp6c	commons-fileupload@1.4	1.5
High	UBUNTU-CVE-2021-3712	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.13
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.2
High	UBUNTU-CVE-2021-3449	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.9
High	UBUNTU-CVE-2024-28182	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	GHSA-gwcr-j4wh-j3cq	jetty-servlets@9.4.22.v20191022	9.4.41
High	GHSA-m394-8rww-3jr7	jetty-server@9.4.22.v20191022	9.4.37
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.9.3	1.9.4
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.25	1.26
High	UBUNTU-CVE-2024-2511	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm10
High	UBUNTU-CVE-2024-3596	krb5@1.16-2ubuntu0.1	1.16-2ubuntu0.4+esm3
High	UBUNTU-CVE-2021-31535	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4
High	UBUNTU-CVE-2022-35737	sqlite3@3.22.0-1ubuntu0.2	3.22.0-1ubuntu0.7
High	UBUNTU-CVE-2022-32206	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.19
High	UBUNTU-CVE-2022-4450	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.21
High	GHSA-2363-cqg2-863c	jdom@1.0	no fix listed
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.2	2.10.5.1
High	UBUNTU-CVE-2018-11236	glibc@2.27-3ubuntu1	2.27-3ubuntu1.2
High	GHSA-cqqj-4p63-rrmm	netty@3.10.5.Final	no fix listed
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.35.Final	4.1.44

Used by

1 chart

Chart	Version	Tag	Containers
onosopencord	3.0.2	2.2.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.