penpotapp/backend:1.16.0-beta container image
Docker HubScanned 20 Sept 2026
Deployed by 1 of 17,813 indexed charts (latest versions) at this tag.Docker Hub all tags of penpotapp/backend
penpotapp/backend:1.16.0-beta resolved to e978e871be07, scanned 20 Sept 2026: 1,018 findings, 10 critical, 4 on KEV; deployed by 1 chart, among them penpot.
Radar Score
1,018 findings on digest e978e871be07 · scanned 20 Sept 2026
KEV ×4 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest e978e871be07 as scanned on 20 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 20 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-4jrv-ppp4-jm57 | gson | 2.8.9 |
| Medium | UBUNTU-CVE-2022-37454 | python3.10 | 3.10.6-1~22.04.2 |
| Medium | UBUNTU-CVE-2022-42898 | krb5 | 1.19.2-2ubuntu0.1 |
| Medium | UBUNTU-CVE-2024-7264 | curl | 7.81.0-1ubuntu1.17 |
| Medium | UBUNTU-CVE-2024-5535 | openssl | 3.0.2-0ubuntu1.17 |
| Medium | UBUNTU-CVE-2019-2126 | aom | no fix listed |
| Medium | UBUNTU-CVE-2022-4304 | openssl | 3.0.2-0ubuntu1.8 |
| Medium | UBUNTU-CVE-2022-40304 | libxml2 | 2.9.13+dfsg-1ubuntu0.2 |
| Medium | UBUNTU-CVE-2020-10735 | python3.10 | no fix listed |
| Medium | UBUNTU-CVE-2022-48522 | perl | 5.34.0-3ubuntu1.3 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.2-0ubuntu1.25 |
| Medium | UBUNTU-CVE-2022-1253 | libde265 | 1.0.8-1ubuntu0.1 |
| Medium | GHSA-w6qf-42m7-vh68 | undertow-core | 2.2.31.Final |
| Medium | UBUNTU-CVE-2023-0215 | openssl | 3.0.2-0ubuntu1.8 |
| Medium | UBUNTU-CVE-2025-55298 | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4 |
| Medium | UBUNTU-CVE-2021-46848 | libtasn1-6 | 4.18.0-4ubuntu0.2 |
| Medium | UBUNTU-CVE-2024-45490 | expat | 2.4.7-1ubuntu0.4 |
| Medium | UBUNTU-CVE-2023-0464 | openssl | 3.0.2-0ubuntu1.9 |
| Medium | UBUNTU-CVE-2023-27534 | curl | 7.81.0-1ubuntu1.10 |
| Medium | GHSA-7f88-5hhx-67m2 | xnio-api | 3.8.14.Final |
| Medium | UBUNTU-CVE-2017-9814 | cairo | 1.16.0-5ubuntu2.1 |
| Medium | UBUNTU-CVE-2023-5363 | openssl | 3.0.2-0ubuntu1.12 |
| Medium | UBUNTU-CVE-2024-37371 | krb5 | 1.19.2-2ubuntu0.4 |
| Medium | UBUNTU-CVE-2022-28321 | pam | 1.4.0-11ubuntu2.1 |
| Medium | UBUNTU-CVE-2023-27533 | curl | 7.81.0-1ubuntu1.10 |
| Medium | UBUNTU-CVE-2022-3358 | openssl | 3.0.2-0ubuntu1.7 |
| Medium | UBUNTU-CVE-2017-11164 | pcre3 | no fix listed |
| Medium | UBUNTU-CVE-2017-17521 | fontforge | no fix listed |
| Medium | UBUNTU-CVE-2024-4741 | openssl | 3.0.2-0ubuntu1.17 |
| Medium | GHSA-xpp6-8r3j-ww43 | undertow-core | 2.2.34.Final |
| Medium | UBUNTU-CVE-2021-32292 | json-c | 0.15-3~ubuntu1.22.04.2 |
| Medium | GHSA-j382-5jj3-vw4j | undertow-core | 2.2.39.Final |
| Medium | UBUNTU-CVE-2024-5171 | aom | 3.3.0-1ubuntu0.1 |
| Medium | UBUNTU-CVE-2024-52533 | glib2.0 | 2.72.4-0ubuntu2.4 |
| Medium | UBUNTU-CVE-2025-49796 | libxml2 | 2.9.13+dfsg-1ubuntu0.8 |
| Medium | UBUNTU-CVE-2022-40674 | expat | 2.4.7-1ubuntu0.1 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.13.4.2 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.13.4 |
| Medium | UBUNTU-CVE-2021-40633 | giflib | 5.1.9-2ubuntu0.1 |
| Medium | UBUNTU-CVE-2021-3610 | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2 |
| Medium | UBUNTU-CVE-2022-45061 | python3.10 | 3.10.6-1~22.04.2 |
| Medium | GHSA-9623-mqmm-5rcf | undertow-core | 2.2.36.Final |
| Medium | UBUNTU-CVE-2026-19931 | curl | no fix listed |
| Medium | UBUNTU-CVE-2022-40735 | openssl | 3.0.2-0ubuntu1.16 |
| Medium | UBUNTU-CVE-2022-44638 | pixman | 0.40.0-1ubuntu0.22.04.1 |
| Medium | UBUNTU-CVE-2022-43680 | expat | 2.4.7-1ubuntu0.2 |
| Medium | UBUNTU-CVE-2021-28861 | python3.10 | 3.10.6-1~22.04.1 |
| Medium | UBUNTU-CVE-2021-20312 | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1 |
| Medium | GHSA-95h4-w6j8-2rp8 | undertow-core | 2.2.38.Final |
| Medium | UBUNTU-CVE-2021-20309 | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| penpotcodechemVerified publisher | 1.0.10 | 1.16.0-beta | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.