StackRadar

pinpointdocker/pinpoint-web:3.1.1-metric container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of pinpointdocker/pinpoint-web

pinpointdocker/pinpoint-web:3.1.1-metric resolved to 96eacf9fe45f, scanned 21 Oct 2026: 282 findings, 0 critical; deployed by 1 chart, among them pinpoint.

Radar Score

2,9420339240

282 findings on digest 96eacf9fe45f · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
3.1.1-metricresolves to96eacf9fe45f1 charttoday03392402,942

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

240 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 96eacf9fe45f as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-9538perl@5.40.1-7ubuntu0.3no fix listed
LowGHSA-c2rv-hwqm-wjpgcalcite-core@1.37.01.42.0
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.4410.1.54
LowGHSA-8hfc-fq58-r658spring-boot-starter-actuator@3.5.53.5.12
LowGHSA-fmxf-pm6p-7xgmasync-http-client@3.0.13.0.10
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.4410.1.47
LowGHSA-x8v2-478q-2hvgasync-http-client@3.0.13.0.14
LowGO-2026-6617stdlib@go1.26.71.26.9
LowGO-2026-6608stdlib@go1.26.71.26.9
LowUBUNTU-CVE-2026-93990expat@2.7.4-1ubuntu0.2no fix listed
LowGO-2026-6607stdlib@go1.26.71.26.9
LowGO-2026-6609stdlib@go1.26.71.26.9
LowUBUNTU-CVE-2026-48961perl@5.40.1-7ubuntu0.3no fix listed
LowGHSA-jmqq-x5g9-9p2wasync-http-client@3.0.13.0.13
LowGHSA-rqf5-2wxv-rjf4async-http-client@3.0.13.0.13
LowGHSA-2qj4-mmr9-4v2fnetty-transport-sctp@4.1.131.Final4.1.137.Final
LowGHSA-cmxv-58fp-fm3gasync-http-client@3.0.13.0.9
LowUBUNTU-CVE-2026-85091zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1no fix listed
LowGHSA-72hv-8253-57qqjackson-core@2.19.22.21.1
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.124.Final4.1.133.Final
LowGO-2026-6613stdlib@go1.26.71.26.9
LowGHSA-wf66-mphr-4c4rkafka-clients@3.7.13.9.2
LowGHSA-c2gf-v879-257jnetty-codec-http2@4.1.131.Final4.1.135.Final
LowGHSA-c69g-56f8-xwqjnetty-codec-http2@4.1.131.Final4.1.136.Final
LowGO-2026-6605stdlib@go1.26.71.26.9
LowGHSA-p9jm-q85p-7mcpnetty-codec-redis@4.1.131.Final4.1.136.Final
LowGO-2026-6610stdlib@go1.26.71.26.9
LowGHSA-272m-gcwp-mpwgnetty-handler-ssl-ocsp@4.1.131.Final4.1.136.Final
LowGHSA-xmv7-r254-6q78netty-resolver-dns@4.1.124.Final4.1.135.Final
LowGHSA-gx83-3vf8-gh7jjackson-databind@2.19.22.21.6
LowGHSA-6hg6-v5c8-fphqlog4j-core@2.25.12.25.4
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.124.Final4.1.137.Final
LowGHSA-337m-mw94-2v6gcommons-configuration2@2.11.02.15.0
LowUBUNTU-CVE-2026-88647gnutls28@3.8.12-2ubuntu1.1no fix listed
LowGHSA-9m3c-qcxr-9x87tomcat-embed-core@10.1.4410.1.53
LowUBUNTU-CVE-2026-107161cyrus-sasl2@2.1.28+dfsg1-9ubuntu3no fix listed
LowUBUNTU-CVE-2026-107778krb5@1.22.1-2ubuntu4.1no fix listed
LowGHSA-3pjw-73gf-8qr5jackson-databind@2.19.22.21.4
LowGHSA-3g8r-4pfx-jmfhnetty-codec-stomp@4.1.131.Final4.1.136.Final
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.124.Final4.1.136.Final
LowGHSA-p2jm-6hj6-9rjgasync-http-client@3.0.13.0.14
LowGHSA-4mp9-239f-g9hgnetty-codec-http@4.1.124.Final4.1.136.Final
LowGHSA-5gvw-p9qm-jgwhjackson-databind@2.19.22.21.5
LowGHSA-jfg9-48mv-9qgxnetty-codec-mqtt@4.1.131.Final4.1.133.Final
LowUBUNTU-CVE-2026-76642util-linux@2.41.3-3ubuntu2.2no fix listed
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.124.Final4.1.133.Final
LowGHSA-3chg-m5w7-qfv5spring-webmvc@6.2.106.2.19
LowGHSA-rcqc-6cw3-h962jackson-databind@2.21.12.21.4
LowGHSA-2jwh-9rmr-j4xfasync-http-client@3.0.13.0.14
LowUBUNTU-CVE-2026-103111pcre2@10.46-1build1no fix listed

Used by

1 chart
ChartVersionTagContainers
pinpointpinpointVerified publisher3.1.73.1.1-metric1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.