StackRadar

provectuslabs/kafka-ui:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of provectuslabs/kafka-ui

provectuslabs/kafka-ui:latest resolved to 8f2ff02d64b0, scanned 14 Sept 2026: 114 findings, 0 critical; deployed by 3 charts, among them gentrace-self-hosted, automatedconfiguration and kafka.

Radar Score

1,597033378

114 findings on digest 8f2ff02d64b0 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to8f2ff02d64b03 charts6 days ago0333781,597

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

33 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 8f2ff02d64b0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-cx7f-g6mp-7hqmspring-webflux@6.0.11no fix listed
MediumGHSA-r7pg-v2c8-mfg3avro@1.11.11.11.4
MediumGHSA-ccgv-vj62-xf9hspring-web@6.0.116.0.17
MediumGHSA-hgjh-9rj2-g67jspring-web@6.0.116.0.18
MediumGHSA-c4q5-6c82-3qpwspring-security-web@6.1.36.1.11
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.23.33.25.5
MediumALPINE-CVE-2023-3446openssl@1.1.1t-r31.1.1u-r2
MediumGHSA-4g8c-wm8x-jfhwnetty-handler@4.1.97.Final4.1.118.Final
MediumGHSA-rhrv-645h-fjfhavro@1.11.11.11.3
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.1.10.01.1.10.1
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.97.Final4.1.132.Final
MediumALPINE-CVE-2023-5678openssl@1.1.1t-r31.1.1w-r1
MediumGHSA-2wrp-6fg6-hmc5spring-web@6.0.116.0.19
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.12.03.18.0
MediumGHSA-4jq9-2xhw-jpx7json@2023022720231013
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.97.Final4.1.135.Final
MediumGHSA-f3jh-qvm4-mg39spring-security-core@6.1.36.1.8
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.15.22.18.8
MediumGHSA-xjhv-p3fv-x24rreactor-netty-http@1.1.101.1.13
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.15.22.18.8
MediumGHSA-prj3-ccx8-p6x4netty-codec-http2@4.1.97.Final4.1.124.Final
MediumGHSA-55g7-9cwv-5qfvsnappy-java@1.1.10.01.1.10.4
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.97.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.97.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.97.Final4.1.133.Final
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.97.Final4.1.136.Final
MediumGHSA-q24v-hpg3-v3jpreactor-netty-core@1.1.101.1.13
MediumGHSA-mf92-479x-3373spring-security-web@6.1.3no fix listed
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.97.Final4.1.135.Final
MediumGHSA-pqr6-cmr2-h8hfsnappy-java@1.1.10.01.1.10.1
MediumGHSA-264p-99wq-f4j6ion-java@1.0.2no fix listed
MediumGHSA-gvpg-vgmx-xg6wnimbus-jose-jwt@9.319.37.2
MediumGHSA-2x2g-32r7-p4x8kafka-clients@3.5.03.7.1

Used by

3 charts
ChartVersionTagContainers
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.3latest1
automatedconfigurationassist-iot-automated-configuration1.0.0latest1
kafkasb-helm-charts0.3.0latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.