sonatype/nexus:oss container image
Docker HubScanned 16 Sept 2026
Deployed by 1 of 17,790 indexed charts (latest versions) at this tag.Docker Hub all tags of sonatype/nexus
sonatype/nexus:oss resolved to 6bc88b51d4d7, scanned 16 Sept 2026: 172 findings, 5 critical, 2 on KEV; deployed by 1 chart, among them nexus2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
66 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 6bc88b51d4d7 as scanned on 16 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-j563-grx4-pjpv | xstream | 1.4.20 |
| Medium | GHSA-www2-v7xj-xrc6 | urllib3 | 1.23 |
| Medium | RHSA-2025:8314 | zlib | 0:1.2.7-21.el7_9.1 |
| Medium | GHSA-x84v-xcm2-53pg | requests | 2.20.0 |
| Medium | RHSA-2026:58563 | openssl | 1:1.0.2k-26.el7_9.2 |
| Medium | GHSA-45x9-q6vj-cqgq | shiro-core | 1.10.0 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-pmhc-2g4f-85cg | shiro-web | 1.12.0 |
| Medium | GHSA-xqj7-j8j5-f2xr | bcprov-jdk15on | 1.60 |
| Medium | GHSA-57qw-cc2g-pv5p | lxml | 3.3.5 |
| Medium | GHSA-55x5-fj6c-h6m8 | lxml | 4.6.5 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | RHSA-2024:6662 | python-setuptools | 0:0.9.8-7.el7_9.1 |
| Medium | GHSA-wxr5-93ph-8wr9 | commons-beanutils | 1.11.0 |
| Medium | GHSA-mh33-7rrq-662w | urllib3 | 1.24.2 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | RHSA-2025:12240 | libxml2 | 0:2.9.1-6.el7_9.10 |
| Medium | GHSA-r9hx-vwmv-q579 | setuptools | 65.5.1 |
| Medium | GHSA-mvr2-9pj6-7w5j | guava | 24.1.1-android |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | GHSA-f8cc-g7j8-xxpm | xstream | 1.4.20 |
| Medium | GHSA-jq4v-f5q6-mjqq | lxml | 4.6.3 |
| Medium | GHSA-pgww-xf46-h92r | lxml | 4.6.2 |
| Medium | GHSA-hfq9-hggm-c56q | xstream | 1.4.21 |
| Medium | RHSA-2024:5076 | krb5 | 0:1.15.1-55.el7_9.2 |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | GHSA-j8r2-6x86-q33q | requests | 2.31.0 |
| Medium | PYSEC-2023-192 | urllib3 | 2.0.6 |
| Medium | RHSA-2025:2673 | libxml2 | 0:2.9.1-6.el7_9.9 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-wqvq-5m8c-6g24 | urllib3 | 1.25.9 |
| Medium | GHSA-4jq9-2xhw-jpx7 | json | 20231013 |
| Medium | RHSA-2025:10861 | java-1.8.0-openjdk | 1:1.8.0.462.b08-1.el7_9 |
| Medium | GHSA-c4r9-r8fh-9vj2 | snakeyaml | 1.31 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | GHSA-xp26-p53h-6h2p | lxml | 4.2.5 |
| Medium | RHSA-2025:11984 | python-setuptools | 0:0.9.8-7.el7_9.2 |
| Medium | RHSA-2026:62269 | dracut | 0:033-577.el7_9 |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | GHSA-cj8j-37rh-8475 | bcpg-jdk15to18 | 1.84 |
| Medium | RHSA-2024:4560 | java-1.8.0-openjdk | 1:1.8.0.422.b05-1.el7_9 |
| Medium | GHSA-3vqj-43w4-2q58 | json | 20230227 |
| Medium | RHSA-2025:17054 | cups | 1:1.6.3-52.el7_9.1 |
| Medium | GHSA-qw69-rqj8-6qw8 | jetty-server | 9.4.51.v20230217 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |