StackRadar

opendronemap/nodeodm:3.6.2 container image

Docker Hub

Scanned 15 Oct 2026

Deployed by 1 of 18,137 indexed charts (latest versions) at this tag.Docker Hub all tags of opendronemap/nodeodm

opendronemap/nodeodm:3.6.2 resolved to fcd99eb23d8d, scanned 15 Oct 2026: 774 findings, 6 critical, 1 on KEV; deployed by 1 chart, among them webodm.

Radar Score

10,353623162583

774 findings on digest fcd99eb23d8d · scanned 15 Oct 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
3.6.2resolves tofcd99eb23d8d1 charttoday62316258310,353

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

162 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest fcd99eb23d8d as scanned on 15 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-fqwf-pjwf-7vqvjackson-databind@2.4.52.6.7.4
MediumGHSA-qr7j-h6gg-jmgcjackson-databind@2.4.52.7.9.4
MediumGHSA-mx7p-6679-8g3qjackson-databind@2.4.52.6.7.3
MediumGHSA-gjmw-vf9h-g25vjackson-databind@2.4.52.6.7.3
MediumGHSA-f9xh-2qgp-cq57jackson-databind@2.4.52.6.7.5
MediumGHSA-85cw-hj65-qqv9jackson-databind@2.4.52.6.7.3
MediumGHSA-fmmc-742q-jg75jackson-databind@2.4.52.6.7.3
MediumGHSA-94xh-2fmc-xf5jsysteminformation@3.42.04.27.11
MediumGHSA-gwp4-hfv6-p7hwjackson-databind@2.4.52.6.7.3
MediumGHSA-m6x4-97wx-4q27jackson-databind@2.4.52.9.10.8
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.4.52.8.11.5
MediumGHSA-r3gr-cxrf-hg25jackson-databind@2.4.52.9.10.8
MediumGHSA-h3cw-g4mq-c5x2jackson-databind@2.4.52.9.10.6
MediumGHSA-5949-rw7g-wx7wjackson-databind@2.4.52.6.7.5
MediumGHSA-qjw2-hr98-qgfhjackson-databind@2.4.52.6.7.5
MediumGHSA-w3f4-3q6j-rh82jackson-databind@2.4.52.7.9.5
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.4.52.9.10.8
MediumGHSA-fmj5-wv96-r2chhttpclient@4.3.34.3.6
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.4.52.7.9.4
MediumGHSA-m72m-mhq2-9p6cjsoup@1.8.11.14.2
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.4.52.6.7.5
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.4.52.6.7.3
MediumGHSA-5xpp-75jx-m839systeminformation@3.42.05.31.7
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.4.52.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.4.52.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.4.52.9.10.8
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.4.52.6.7.3
MediumGHSA-89qr-369f-5m5xjackson-databind@2.4.52.6.7.5
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.4.52.6.7.5
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.4.52.6.7.5
MediumUBUNTU-CVE-2018-13876hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumGHSA-vfqx-33qm-g869jackson-databind@2.4.52.6.7.5
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.4.52.12.6.1
MediumUBUNTU-CVE-2018-13867hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.4.52.9.10.4
MediumUBUNTU-CVE-2018-13874hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumUBUNTU-CVE-2018-13871hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumUBUNTU-CVE-2018-13872hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumUBUNTU-CVE-2025-47917mbedtls@2.28.8-12.28.8-1ubuntu0.1~esm1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.32.5.4
MediumGHSA-cfh5-3ghh-wfjxhttpclient@4.3.34.3.5
MediumGHSA-93q8-gq69-wqmwansi-regex@4.1.04.1.1
MediumGHSA-wm7h-9275-46v2dicer@0.2.5no fix listed
MediumUBUNTU-CVE-2018-13866hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumUBUNTU-CVE-2018-13868hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.4.52.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.4.52.12.7.1
MediumGHSA-668q-qrv7-99fmlogback-core@1.1.21.2.9
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.3.34.5.13

Used by

1 chart
ChartVersionTagContainers
webodmhelmforgeVerified publisher1.0.1, 1.0.03.6.22

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 15 Oct 2026 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.