pinpointdocker/pinpoint-quickstart:2.5.4 container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of pinpointdocker/pinpoint-quickstart

pinpointdocker/pinpoint-quickstart:2.5.4 resolved to 382424391b89, scanned 21 Oct 2026: 447 findings, 12 critical, 3 on KEV; deployed by 1 chart, among them pinpoint.

Radar Score

7,3971224113298

447 findings on digest 382424391b89 · scanned 21 Oct 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.5.4resolves to	382424391b89	1 chart	today	1224113298	7,397

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

447 distinct on this digest

Findings for digest 382424391b89 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.1.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.1.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	USN-7352-1KEV	freetype@2.11.1+dfsg-1ubuntu0.2	2.11.1+dfsg-1ubuntu0.3
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.21
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.4.4	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-coyote@8.5.100	no fix listed
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.4.4	2.6.7.1
Critical	USN-6737-1	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.7
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	GHSA-4wrc-f8pq-fpqp	spring-web@4.1.7.RELEASE	6.0.0
High	USN-6986-1	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.18
High	GHSA-4w82-r329-3q67	jackson-databind@2.4.4	2.6.7.4
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@4.1.7.RELEASE	no fix listed
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.4.4	2.6.7.5
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.4.4	2.7.9.7
High	GHSA-q93h-jc49-78gg	jackson-databind@2.4.4	2.7.9.7
High	UBUNTU-CVE-2024-28182	nghttp2@1.43.0-1ubuntu0.1	1.43.0-1ubuntu0.2
High	GHSA-645p-88qh-w398	jackson-databind@2.4.4	2.6.7.3
High	USN-7257-1	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.5
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.4.4	2.6.7.3
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.4.4	2.6.7.3
High	GHSA-558x-2xjg-6232	spring-expression@4.1.7.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.4.4	2.6.7.3
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.4.4	2.6.7.3
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.4.4	2.7.9.5
High	GHSA-9gph-22xh-8x98	jackson-databind@2.4.4	2.6.7.5
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.4.4	2.6.7.4
High	GHSA-h592-38cm-4ggp	jackson-databind@2.4.4	2.6.7.3
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.4.4	2.7.9.6
High	GHSA-g8hw-794c-4j9g	spring-core@4.1.7.RELEASE	4.3.15
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.4.4	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.4.4	2.6.7.4
Medium	GHSA-qr7j-h6gg-jmgc	jackson-databind@2.4.4	2.7.9.4
Medium	GHSA-mx7p-6679-8g3q	jackson-databind@2.4.4	2.6.7.3
Medium	GHSA-gjmw-vf9h-g25v	jackson-databind@2.4.4	2.6.7.3
Medium	USN-6944-1	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.17
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.4.4	2.6.7.5
Medium	GHSA-85cw-hj65-qqv9	jackson-databind@2.4.4	2.6.7.3
Medium	GHSA-fmmc-742q-jg75	jackson-databind@2.4.4	2.6.7.3
Medium	GHSA-gwp4-hfv6-p7hw	jackson-databind@2.4.4	2.6.7.3
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.4.4	2.9.10.8
Medium	GHSA-f3j5-rmmp-3fc5	jackson-databind@2.4.4	2.8.11.5
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.4.4	2.9.10.8
Medium	GHSA-h3cw-g4mq-c5x2	jackson-databind@2.4.4	2.9.10.6

Used by

1 chart

Chart	Version	Tag	Containers
pinpointpinpointVerified publisher	3.1.7	2.5.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.