StackRadar

roadiehq/community-backstage-image:latest container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of roadiehq/community-backstage-image

roadiehq/community-backstage-image:latest resolved to ef355bf5b639, scanned 14 Sept 2026: 492 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them backstage.

Radar Score

7,232012149331

492 findings on digest ef355bf5b639 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves toef355bf5b6391 chart6 days ago0121493317,232

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

492 distinct on this digest

Findings for digest ef355bf5b639 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-8x88-c5mf-7j5wtar@4.4.137.5.18
LowGHSA-jchw-25xp-jwwcfollow-redirects@1.13.01.15.4
LowDLA-3626-1krb5@1.17-3+deb10u11.17-3+deb10u6
LowGHSA-pqw5-jmp5-px4vparse-url@5.0.18.1.0
LowGHSA-j5g9-f88f-gfj3httplib2@0.19.10.32.0
LowGHSA-rv95-896h-c2vcexpress@4.17.14.19.2
LowGHSA-rq6q-wr2q-7pgp@backstage/plugin-scaffolder-backend@0.14.22.2.2
LowDSA-5174-1gnupg2@2.2.12-1+deb10u12.2.12-1+deb10u2
LowGHSA-c2c7-rcm5-vvqjpicomatch@2.2.22.3.2
LowGHSA-43fp-rhv2-5gv8certifi@2021.5.302022.12.07
LowDSA-4954-1c-ares@1.14.0-11.14.0-1+deb10u1
LowGHSA-3x9g-8vmp-wqvftornado@5.1.16.5.6
LowGHSA-2g4f-4pwh-qvx6ajv@6.12.66.14.0
LowGHSA-wf93-45jw-7689pip@19.2.326.1.2
LowGHSA-6chq-wfr3-2hj9axios@0.21.10.31.1
LowGHSA-p8p7-x288-28g6request@2.88.2no fix listed
LowGHSA-r6q2-hw4h-h46wtar@4.4.137.5.4
LowGHSA-2883-xcg3-v3hhjs-yaml@4.1.04.3.2
LowGHSA-xjpj-3mr7-gcpfhandlebars@4.7.74.7.9
LowGHSA-r292-9mhp-454mtar@4.4.137.5.21
LowGHSA-r4q5-vmmm-2653follow-redirects@1.13.01.16.0
LowGHSA-r6h4-mm7h-8pmqpymdown-extensions@7.110.16.1
LowGHSA-qjxf-f2mg-c6mctornado@5.1.16.5.5
LowGHSA-jvwf-75h9-cwggprotobufjs@6.11.27.5.6
LowDLA-3114-1mariadb-10.3@1:10.3.29-0+deb10u11:10.3.36-0+deb10u1
LowDLA-3165-1expat@2.2.6-2+deb10u12.2.6-2+deb10u6
LowDLA-3118-1unzip@6.0-23+deb10u26.0-23+deb10u3
LowGHSA-h75v-3vvj-5mfjjinja2@3.0.13.1.4
LowGHSA-4rq4-32rv-6wp6shelljs@0.8.40.8.5
LowGHSA-wf5p-g6vw-rhxxaxios@0.21.10.28.0
LowDLA-3429-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u5
LowGHSA-mpf4-983q-p7j4tornado@5.1.16.5.8
LowGHSA-w5hq-g745-h8pquuid@3.3.311.1.1
LowGHSA-w9mr-4mfr-499fms@0.7.12.0.0
LowGHSA-9hjg-9r4m-mvj7requests@2.26.02.32.4
LowDLA-3782-1util-linux@2.33.1-0.12.33.1-0.1+deb10u1
LowGHSA-7hv8-3fr9-j2hv@backstage/core-components@0.3.00.12.4
LowGHSA-7hv8-3fr9-j2hv@backstage/plugin-catalog-backend@0.13.11.7.2
LowGHSA-7hv8-3fr9-j2hv@backstage/catalog-model@0.9.01.2.0
LowDLA-3586-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u4
LowGHSA-gxpj-cx7g-858cdebug@3.2.63.2.7
LowDLA-3692-1curl@7.64.0-4+deb10u27.64.0-4+deb10u8
LowDLA-3119-1expat@2.2.6-2+deb10u12.2.6-2+deb10u5
LowGHSA-2328-f5f3-gj25node-forge@0.8.51.4.0
LowGHSA-3x3f-jcp3-g22j@backstage/plugin-catalog-backend@0.13.11.26.0
LowDLA-3763-1curl@7.64.0-4+deb10u27.64.0-4+deb10u9
LowGHSA-h5c8-rqwp-cp95jinja2@3.0.13.1.3
LowDLA-3263-1libtasn1-6@4.13-34.13-3+deb10u1
LowDLA-3758-1tiff@4.1.0+git191117-2~deb10u24.1.0+git191117-2~deb10u9
LowGHSA-9ppj-qmqm-q256tar@4.4.137.5.11

Used by

1 chart
ChartVersionTagContainers
backstageirembo-backstage-helmVerified publisher1.0.5latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.