penpotapp/backend:2.17.2 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of penpotapp/backend
penpotapp/backend:2.17.2 resolved to 770b55f6e51b, scanned 14 Sept 2026: 37 findings, 0 critical; deployed by 1 chart, among them penpot.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
37 distinct on this digest
Findings for digest 770b55f6e51b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.2.15.Final |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.1.136.Final |
| Medium | GHSA-v3jc-474w-2wm6 | httpcore5-h2 | 5.4.3 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.2.15.Final |
| Medium | GHSA-58pv-8j8x-9vj2 | jaraco-context | 6.1.0 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.2.17.Final |
| Low | GHSA-5pvg-856g-cp85 | netty-resolver-dns | 4.2.15.Final |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.26.1 |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.2.15.Final |
| Low | GHSA-93wv-jw9v-4972 | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-6jqx-86gh-f27w | netty-codec-http | 4.1.136.Final |
| Low | GHSA-mvh2-crg5-v77c | netty-codec-http | 4.1.136.Final |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-676x-f7gg-47vc | netty-resolver-dns | 4.2.15.Final |
| Low | GHSA-xx22-p4ch-683r | lz4-java | 1.11.1 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.2.17.Final |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 2.22.1 |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.2.15.Final |
| Low | GHSA-c69g-56f8-xwqj | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-hjcp-jmpx-g3qm | httpclient5 | 5.6.3 |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.1.136.Final |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.22.1 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.2.16.Final |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-5942 | stdlib | 1.26.6 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GHSA-3x3v-w654-m28m | undertow-core | no fix listed |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | GHSA-pmhh-3w7g-xqp8 | jsoup | 1.23.1 |