scmmanager/scm-manager:3.12.2 container image
Docker HubScanned 24 Oct 2026
Deployed by 1 of 18,232 indexed charts (latest versions) at this tag.Docker Hub all tags of scmmanager/scm-manager
scmmanager/scm-manager:3.12.2 resolved to d452555db6e5, scanned 24 Oct 2026: 64 findings, 0 critical; deployed by 1 chart, among them scm-manager.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
64 distinct on this digest
Findings for digest d452555db6e5 as scanned on 24 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 24 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2021-27219 | glib | 2.66.6-r0 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.21.4 |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 11.0.29 |
| Medium | GHSA-x96m-rh44-vgv8 | shiro-core | 2.2.1 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.21.4 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | GHSA-g3pr-3p32-fp23 | micrometer-core | 1.16.6 |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | GHSA-2fvj-hgj9-j2gr | jetty-security | 11.0.31 |
| Medium | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-111497 | brotli | 1.2.1-r0 |
| Medium | GHSA-w737-wx49-qj23 | micrometer-core | 1.16.6 |
| Low | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Low | GHSA-9pwp-9qqc-pr26 | bcprov-jdk18on | 1.85 |
| Low | ALPINE-CVE-2026-77214 | expat | 2.9.0-r0 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.21.4 |
| Low | ALPINE-CVE-2026-9076 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-45445 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | GHSA-q4xh-88c3-wmh7 | jackson-databind | 2.21.6 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | GHSA-p6pp-m3f8-5c89 | jackson-core | 2.21.7 |
| Low | ALPINE-CVE-2026-42766 | openssl | 3.5.7-r0 |
| Low | GHSA-7hhh-6rmp-j9qf | jackson-core | 2.21.7 |
| Low | GHSA-cxp5-3px4-pw24 | jackson-databind | 2.21.7 |
| Low | GHSA-wv8q-qhhj-9h54 | jackson-databind | 2.21.7 |
| Low | GHSA-qp49-qgx5-5m26 | bcprov-jdk18on | 1.85 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-gx83-3vf8-gh7j | jackson-databind | 2.21.6 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.21.4 |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | GHSA-fcvm-3cpj-f9qx | shiro-core | 2.2.0 |
| Low | GHSA-rcqc-6cw3-h962 | jackson-databind | 2.21.4 |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 2.21.5 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-wjgm-6hv5-3cvf | jackson-databind | 2.21.6 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-102633 | expat | 2.9.0-r0 |
| Low | GHSA-c6r4-qjmw-cvj2 | shiro-web | 2.2.0 |
| Low | GHSA-9fxm-vc8v-hj55 | jackson-databind | 2.21.4 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| scm-managerscm-manager | 3.12.2 | 3.12.2 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.