StackRadar

penpotapp/backend:2.18.1 container image

Docker Hub

Scanned 2 Oct 2026

Deployed by 1 of 17,985 indexed charts (latest versions) at this tag.Docker Hub all tags of penpotapp/backend

penpotapp/backend:2.18.1 resolved to 3b7df71db88d, scanned 2 Oct 2026: 14 findings, 0 critical; deployed by 1 chart, among them penpot.

Radar Score

18400311

14 findings on digest 3b7df71db88d · scanned 2 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.18.1resolves to3b7df71db88d1 charttoday00311184

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

14 distinct on this digest

Findings for digest 3b7df71db88d as scanned on 2 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 2 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.2.13.Final4.2.15.Final
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.2.13.Final4.2.15.Final
MediumGHSA-c4c3-7fpv-j4q5netty-handler@4.2.13.Final4.2.17.Final
LowGHSA-c653-97m9-rcg9netty-handler@4.2.13.Final4.2.15.Final
LowGHSA-p6pp-m3f8-5c89jackson-core@2.22.22.22.3
LowGHSA-676x-f7gg-47vcnetty-resolver-dns@4.2.13.Final4.2.15.Final
LowGHSA-5pvg-856g-cp85netty-resolver-dns@4.2.13.Final4.2.15.Final
LowGHSA-fccg-mwvh-qqg4netty-handler@4.2.13.Final4.2.17.Final
LowGHSA-7hhh-6rmp-j9qfjackson-core@2.22.22.22.3
LowGHSA-cxp5-3px4-pw24jackson-databind@2.22.22.22.3
LowGHSA-wv8q-qhhj-9h54jackson-databind@2.22.22.22.3
LowGHSA-xmv7-r254-6q78netty-resolver-dns@4.2.13.Final4.2.15.Final
LowGHSA-mfg7-5gfp-c4w3netty-codec-dns@4.2.13.Final4.2.16.Final
LowGHSA-3x3v-w654-m28mundertow-core@2.4.0.Finalno fix listed

Used by

1 chart
ChartVersionTagContainers
penpotpenpotOfficialVerified publisher1.11.12.18.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 2 Oct 2026 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.