penpotapp/backend:2.18.3 container image
Docker HubScanned 8 Oct 2026
Deployed by 1 of 18,053 indexed charts (latest versions) at this tag.Docker Hub all tags of penpotapp/backend
penpotapp/backend:2.18.3 resolved to 2df1b3440d2a, scanned 8 Oct 2026: 17 findings, 0 critical; deployed by 1 chart, among them penpot.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
17 distinct on this digest
Findings for digest 2df1b3440d2a as scanned on 8 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 8 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.2.15.Final |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.2.15.Final |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.2.15.Final |
| Low | GHSA-5pvg-856g-cp85 | netty-resolver-dns | 4.2.15.Final |
| Low | GHSA-p6pp-m3f8-5c89 | jackson-core | 2.22.3 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.2.17.Final |
| Low | GHSA-7hhh-6rmp-j9qf | jackson-core | 2.22.3 |
| Low | GHSA-676x-f7gg-47vc | netty-resolver-dns | 4.2.15.Final |
| Low | GHSA-cxp5-3px4-pw24 | jackson-databind | 2.22.3 |
| Low | GHSA-wv8q-qhhj-9h54 | jackson-databind | 2.22.3 |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.2.15.Final |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.2.17.Final |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.2.16.Final |
| Low | GHSA-gm45-99xc-r7wv | lz4-java | 1.11.4 |
| Low | GHSA-mcr4-qmvw-px4g | lz4-java | 1.11.4 |
| Low | GHSA-3x3v-w654-m28m | undertow-core | no fix listed |
| Low | GHSA-343h-94h5-c4wr | lz4-java | 1.11.4 |