owasp/dependency-track:3.8.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of owasp/dependency-track

owasp/dependency-track:3.8.0 resolved to efc65e702ee1, scanned 14 Sept 2026: 139 findings, 5 critical, 1 on KEV; deployed by 1 chart, among them dependency-track.

Radar Score

3,6335216746

139 findings on digest efc65e702ee1 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.8.0resolves to	efc65e702ee1	1 chart	7 days ago	5216746	3,633

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

46 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest efc65e702ee1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.27.v20200227	9.4.63
Low	GHSA-v6w3-2prq-h95f	jakarta.el@3.0.2	3.0.4
Low	GHSA-7v6m-28jr-rg84	hibernate-validator@6.0.17.Final	6.2.0.CR1
Low	GHSA-p75g-cxfj-7wrx	pebble@3.1.2	no fix listed
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.10.3	2.14.0
Low	GHSA-8wv5-x4w7-5gww	libthrift@0.13.0	0.24.0
Low	GHSA-683x-4444-jxh8	cyclonedx-core-java@2.7.0	9.0.4
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.13.0	0.23.0
Low	GHSA-c43q-5hpj-4crv	jersey-common@2.29.1	2.34
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.27.v20200227	9.4.56
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.24	1.31
Low	GHSA-gmg8-593g-7mv3	poi-ooxml@3.17	5.4.0
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.27.v20200227	9.4.57.v20241219
Low	ALPINE-CVE-2019-1563	openssl@1.1.1c-r0	1.1.1d-r0
Low	GHSA-9jwc-q6j3-8g9g	poi@3.17	4.1.1
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.27.v20200227	9.4.52
Low	GHSA-6fhj-vr9j-g45r	cyclonedx-core-java@2.7.0	11.0.1
Low	ALPINE-CVE-2021-23839	openssl@1.1.1c-r0	1.1.1j-r0
Low	GHSA-22wj-vf5f-wrvj	h2@1.4.200	2.2.220
Low	ALPINE-CVE-2019-1547	openssl@1.1.1c-r0	1.1.1d-r0
Low	ALPINE-CVE-2020-28928	musl@1.1.22-r3	1.1.22-r4
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.17.Final	6.2.0.Final
Low	GHSA-whr2-9x5f-5c79	alpine@1.7.2	1.10.4
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.19	1.26.0
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.10.3	2.18.8
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.3	2.18.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.10.3	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.5	42.2.27
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.27.v20200227	12.0.12
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.27.v20200227	no fix listed
Low	GHSA-m6cp-vxjx-65j6	jetty-server@9.4.27.v20200227	9.4.41
Low	GHSA-7g45-4rm6-3mm3	guava@24.1.1-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-5mg8-w23w-74h3	guava@24.1.1-jre	32.0.0-android
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.10.3	2.13.0
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.4.27.v20200227	9.4.47
Low	GHSA-p26g-97m4-6q7c	jetty-server@9.4.27.v20200227	9.4.51.v20230217
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.27.v20200227	no fix listed
Low	GHSA-58qw-p7qm-5rvh	jetty-xml@9.4.27.v20200227	9.4.52.v20230823
Low	GHSA-p47f-322f-whfh	logback-core@1.2.3	1.5.33
Low	GHSA-6v67-2wr5-gvf4	logback-core@1.2.3	1.3.15
Low	GHSA-qqpg-mvqg-649v	logback-core@1.2.3	1.5.25

Used by

1 chart

Chart	Version	Tag	Containers
dependency-tracknovum-rgi-charts	0.1.8	3.8.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.