pavanelthepu/todo-api:1.0.2 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of pavanelthepu/todo-api

pavanelthepu/todo-api:1.0.2 resolved to f47658e3b24c, scanned 14 Sept 2026: 120 findings, 5 critical, 4 on KEV; deployed by 3 charts, among them todo-api, todo-api and todo-api.

Radar Score

2,5445114460

120 findings on digest f47658e3b24c · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.0.2resolves to	f47658e3b24c	3 charts	5 days ago	5114460	2,544

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

120 distinct on this digest

Findings for digest f47658e3b24c as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.8	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.3.8	5.3.18
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.48	9.0.99
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.28	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.48	9.0.98
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.8	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.48	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.48	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.8	no fix listed
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.48	9.0.71
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.48	9.0.81
High	GHSA-w24x-87mr-4r23	spring-data-mongodb@3.2.2	3.3.5
High	GHSA-558x-2xjg-6232	spring-expression@5.3.8	5.3.17
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.48	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.48	9.0.109
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.48	9.0.98
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.8	no fix listed
Medium	GHSA-7phw-cxx7-q9vq	spring-webmvc@5.3.8	5.3.26
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.3.8	5.3.19
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.8	5.3.32
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.12.3	2.12.6.1
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.48	9.0.90
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.48	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.48	9.0.118
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.48	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.8	5.3.33
Medium	GHSA-668q-qrv7-99fm	logback-core@1.2.3	1.2.9
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.12.3	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.12.3	2.12.7.1
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.48	9.0.118
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.28	1.31
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.48	9.0.83
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.48	9.0.90
Medium	GHSA-rq2w-37h9-vg94	tomcat-embed-core@9.0.48	9.0.69
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.48	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.48	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.48	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.48	9.0.118
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.48	9.0.107
Medium	GHSA-hh26-6xwr-ggv7	spring-beans@5.3.8	5.3.20
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.48	9.0.107
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.48	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.48	9.0.121
Medium	GHSA-9w3m-gqgf-c4p9	snakeyaml@1.28	1.32
Medium	GHSA-p22x-g9px-3945	tomcat-embed-core@9.0.48	9.0.68
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@5.3.8	5.3.34
Medium	GHSA-v682-8vv8-vpwr	tomcat-embed-websocket@9.0.48	9.0.86
Medium	GHSA-c4r9-r8fh-9vj2	snakeyaml@1.28	1.31
Medium	GHSA-98wm-3w3q-mw94	snakeyaml@1.28	1.31
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@9.0.48	9.0.121

Used by

3 charts

Chart	Version	Tag	Containers
todo-apipavanelthepu	0.1.0	1.0.2	1
todo-apihelm-repo-sharif	0.1.0	1.0.2	1
todo-apipb-todo-api-v1	0.1.0	1.0.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.