roadiehq/community-backstage-image:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of roadiehq/community-backstage-image

roadiehq/community-backstage-image:latest resolved to ef355bf5b639, scanned 14 Sept 2026: 492 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them backstage.

Radar Score

7,232012149331

492 findings on digest ef355bf5b639 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	ef355bf5b639	1 chart	6 days ago	012149331	7,232

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

492 distinct on this digest

Findings for digest ef355bf5b639 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-vj76-c3g6-qr5v	tar-fs@2.1.1	2.1.4
Medium	GHSA-pfrx-2q88-qq97	got@6.7.1	11.8.5
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.19.0	1.20.3
Medium	GHSA-3j8f-xvm3-ffx4	parse-path@4.0.1	5.0.0
Medium	GHSA-f6ww-3ggp-fr8h	xmldom@0.1.27	no fix listed
Medium	DLA-3152-1	glibc@2.28-10	2.28-10+deb10u2
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.0	7.5.11
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.0.4	3.1.3
Medium	GHSA-pf86-5x62-jrwf	axios@0.21.1	0.31.1
Medium	GHSA-vh95-rmgr-6w4m	minimist@0.0.8	0.2.1
Medium	GHSA-5xp3-jfq3-5q8x	pip@19.2.3	21.1
Low	PYSEC-2026-2132	click@7.0	8.3.3
Low	GHSA-v39p-96qg-c8rf	object-path@0.11.5	0.11.6
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-39v3-f278-vj3g	@backstage/plugin-techdocs-backend@0.9.1	1.10.13
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	GHSA-cfm4-qjh2-4765	node-forge@0.8.5	1.3.0
Low	DLA-3614-1	python3.7@3.7.3-2+deb10u3	3.7.3-2+deb10u6
Low	DSA-5122-1	gzip@1.9-3	1.9-3+deb10u1
Low	DSA-5123-1	xz-utils@5.2.4-1	5.2.4-1+deb10u1
Low	GHSA-62hf-57xw-28j9	axios@0.21.1	0.31.1
Low	GHSA-7cx3-6m66-7c5m	tornado@5.1.1	6.5
Low	GHSA-hhhv-q57g-882q	jose@2.0.5	2.0.7
Low	GHSA-x6wf-f3px-wcqx	xmldom@0.1.27	no fix listed
Low	DSA-5073-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u2
Low	GHSA-34x7-hfp2-rc4v	tar@4.4.13	7.5.7
Low	GHSA-mq66-vcfc-8246	mercurial@4.8.2	4.9
Low	GHSA-3g43-6gmg-66jw	axios@0.21.1	0.31.1
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.13.0	1.15.6
Low	GHSA-ph9p-34f9-6g65	tmp@0.0.33	0.2.6
Low	GHSA-hqhp-5p83-hx96	prismjs@1.23.0	1.25.0
Low	GHSA-554w-wpv2-vw27	node-forge@0.8.5	1.3.2
Low	GHSA-hfxv-24rg-xrqf	axios@0.21.1	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.21.1	0.32.0
Low	DLA-3288-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u4
Low	DLA-3651-1	postgresql-11@11.12-0+deb10u1	11.22-0+deb10u1
Low	GHSA-gm37-52c6-37mw	pymdown-extensions@7.1	11.0.1
Low	GHSA-mp6q-xf9x-fwf7	apollo-server@2.21.0	no fix listed
Low	GHSA-qgmg-gppg-76g5	validator@8.2.0	13.7.0
Low	GHSA-w7fj-336r-vw49	@backstage/plugin-auth-backend@0.3.19	0.4.9
Low	GHSA-685m-2w69-288q	protobufjs@6.11.2	7.5.6
Low	GHSA-75px-5xx7-5xc7	protobufjs@6.11.2	7.5.6
Low	DSA-5087-1	cyrus-sasl2@2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-5375-pq7m-f5r2	@grpc/grpc-js@1.3.2	1.9.16
Low	GHSA-9cx6-37pm-9jff	handlebars@4.7.7	4.7.9
Low	GHSA-hj3f-6gcp-jg8j	tornado@5.1.1	6.3.2
Low	GHSA-pw2r-vq6v-hr8c	follow-redirects@1.13.0	1.14.8
Low	GHSA-f5x3-32g6-xq36	tar@4.4.13	6.2.1

Used by

1 chart

Chart	Version	Tag	Containers
backstageirembo-backstage-helmVerified publisher	1.0.5	latest	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.