subsquid/hydra-indexer:5.0.0-alpha.37 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of subsquid/hydra-indexer
subsquid/hydra-indexer:5.0.0-alpha.37 resolved to a7f8b9bad7ee, scanned 14 Sept 2026: 124 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them interbtc-hydra.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
124 distinct on this digest
Findings for digest a7f8b9bad7ee as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2023-38545 | curl | 8.4.0-r0 |
| Critical | ALPINE-CVE-2023-44487KEV | nghttp2 | 1.46.0-r2 |
| High | ALPINE-CVE-2023-0286 | openssl | 1.1.1t-r0 |
| High | ALPINE-CVE-2023-2650 | openssl | 1.1.1u-r0 |
| High | GHSA-fx4w-v43j-vc45 | typeorm | 0.3.0 |
| High | ALPINE-CVE-2022-37434 | zlib | 1.2.12-r2 |
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| High | GHSA-w573-4hg7-7wgq | decode-uri-component | 0.2.1 |
| High | ALPINE-CVE-2022-32206 | curl | 7.80.0-r2 |
| High | ALPINE-CVE-2022-4450 | openssl | 1.1.1t-r0 |
| High | ALPINE-CVE-2022-43551 | curl | 7.80.0-r5 |
| High | ALPINE-CVE-2022-32207 | curl | 7.80.0-r2 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.5.3 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | ALPINE-CVE-2022-32221 | curl | 7.80.0-r4 |
| Medium | ALPINE-CVE-2022-4304 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2022-32205 | curl | 7.80.0-r2 |
| Medium | GHSA-p6mc-m468-83gw | lodash.set | no fix listed |
| Medium | ALPINE-CVE-2023-0215 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2022-42915 | curl | 7.80.0-r4 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 1.1.1t-r2 |
| Medium | GHSA-93q8-gq69-wqmw | ansi-regex | 4.1.1 |
| Medium | ALPINE-CVE-2023-27534 | curl | 8.0.1-r0 |
| Medium | ALPINE-CVE-2022-32208 | curl | 7.80.0-r2 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 2.5.4 |
| Medium | ALPINE-CVE-2023-27533 | curl | 8.0.1-r0 |
| Medium | ALPINE-CVE-2022-27782 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-40674 | expat | 2.4.9-r0 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | ALPINE-CVE-2022-27781 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-45061 | python3 | 3.9.16-r0 |
| Medium | ALPINE-CVE-2023-28319 | curl | 8.1.0-r0 |
| Medium | ALPINE-CVE-2022-27780 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-43680 | expat | 2.5.0-r0 |
| Medium | ALPINE-CVE-2023-3446 | openssl | 1.1.1u-r2 |
| Medium | GHSA-f8q6-p94x-37v3 | minimatch | 3.0.5 |
| Medium | ALPINE-CVE-2022-42916 | curl | 7.80.0-r4 |
| Medium | GHSA-72xf-g2v4-qvf3 | tough-cookie | 4.1.3 |
| Medium | ALPINE-CVE-2022-2097 | openssl | 1.1.1q-r0 |
| Medium | GHSA-rc47-6667-2j5j | http-cache-semantics | 4.1.1 |
| Medium | ALPINE-CVE-2023-5678 | openssl | 1.1.1w-r1 |
| Medium | ALPINE-CVE-2023-23914 | curl | 7.80.0-r6 |
| Medium | ALPINE-CVE-2023-28320 | curl | 8.1.0-r0 |
| Medium | ALPINE-CVE-2023-35945 | nghttp2 | 1.46.0-r1 |
| Medium | ALPINE-CVE-2022-43552 | curl | 7.80.0-r5 |
| Medium | GHSA-95m3-7q98-8xr5 | sha.js | 2.4.12 |
| Medium | ALPINE-CVE-2022-29458 | ncurses | 6.3_p20211120-r1 |
| Medium | ALPINE-CVE-2023-23916 | curl | 7.80.0-r6 |
| Medium | ALPINE-CVE-2023-46218 | curl | 8.5.0-r0 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| interbtc-hydrainterlay | 0.1.15 | 5.0.0-alpha.37 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.