sonatype/nexus:oss container image

Docker Hub

Scanned 16 Sept 2026

Deployed by 1 of 17,790 indexed charts (latest versions) at this tag.Docker Hub all tags of sonatype/nexus

sonatype/nexus:oss resolved to 6bc88b51d4d7, scanned 16 Sept 2026: 172 findings, 5 critical, 2 on KEV; deployed by 1 chart, among them nexus2.

Radar Score

3,220586693

172 findings on digest 6bc88b51d4d7 · scanned 16 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
ossresolves to	6bc88b51d4d7	1 chart	9 days ago	586693	3,220

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

93 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 6bc88b51d4d7 as scanned on 16 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:1537	python@2.7.5-94.el7_9	0:2.7.5-94.el7_9.2
Low	GHSA-x96m-rh44-vgv8	shiro-core@1.8.0	2.2.1
Low	RHSA-2026:4756	libpng@2:1.5.13-8.el7	2:1.5.13-8.el7_9.2
Low	RHSA-2025:3844	java-1.8.0-openjdk@1:1.8.0.412.b08-1.el7_9	1:1.8.0.452.b09-1.el7_9
Low	GHSA-qw3f-w4pf-jh5f	tika-core@1.22	1.28.3
Low	GHSA-jc7h-c423-mpjc	shiro-core@1.8.0	1.13.0
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.9	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.9	1.2.13
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.45.v20220203	9.4.63
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.19.4	3.19.6
Low	RHSA-2026:9682	java-1.8.0-openjdk@1:1.8.0.412.b08-1.el7_9	1:1.8.0.492.b09-1.el7_9
Low	RHSA-2026:9031	python-urllib3@1.10.2-7.el7	0:1.10.2-7.el7_9.1
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.3.1	3.6.1
Low	RHSA-2026:1720	openssl@1:1.0.2k-26.el7_9	1:1.0.2k-26.el7_9.1
Low	RHSA-2025:13789	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.13
Low	RHSA-2024:7705	systemd@219-78.el7_9.9	0:219-78.el7_9.11
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.11.3	2.14.0
Low	RHSA-2026:65773	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9.1
Low	GHSA-574f-3g2m-x479	bcprov-jdk15to18@1.69	no fix listed
Low	RHSA-2026:51183	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.45.v20220203	9.4.56
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.19.4	3.19.6
Low	RHSA-2025:10357	pam@1.1.8-23.el7	0:1.1.8-23.el7_9.1
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.18	1.31
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.56	1.66
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.45.v20220203	9.4.57.v20241219
Low	RHSA-2026:42876	java-1.8.0-openjdk@1:1.8.0.412.b08-1.el7_9	1:1.8.0.502.b07-1.1.el7_9
Low	RHSA-2025:10219	glibc@2.17-326.el7_9.3	0:2.17-326.el7_9.5
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.45.v20220203	9.4.52
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.56	1.78
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15to18@1.69	1.78
Low	RHSA-2025:13464	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.12
Low	RHSA-2025:4098	libxslt@1.1.28-6.el7	0:1.1.28-9.el7_9
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.56	1.78
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15to18@1.69	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15to18@1.69	1.84
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.56	1.84
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15to18@1.69	1.78
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15to18@1.69	1.73
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.56	no fix listed
Low	GHSA-4265-ccf5-phj5	commons-compress@1.21	1.26.0
Low	RHSA-2026:0251	libpng@2:1.5.13-8.el7	2:1.5.13-8.el7_9.1
Low	RHSA-2026:1608	glib2@2.56.1-9.el7_9	0:2.56.1-11.el7_9
Low	GHSA-9hjg-9r4m-mvj7	requests@2.6.0	2.32.4
Low	RHSA-2026:19566	glib2@2.56.1-9.el7_9	0:2.56.1-12.el7_9
Low	RHSA-2025:1352	krb5@1.15.1-55.el7_9	0:1.15.1-55.el7_9.4
Low	GHSA-72m5-fvvv-55m6	bcprov-jdk15on@1.56	1.61
Low	RHSA-2026:5393	python@2.7.5-94.el7_9	0:2.7.5-94.el7_9.3
Low	GHSA-vfmq-68hx-4jfw	lxml@3.2.1	6.1.0
Low	GHSA-67mf-3cr5-8w23	bcprov-jdk15to18@1.69	1.78

Used by

1 chart

Chart	Version	Tag	Containers
nexus2novum-rgi-charts	0.1.1	oss	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.