swaggerapi/swagger-ui:v4.12.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of swaggerapi/swagger-ui
swaggerapi/swagger-ui:v4.12.0 resolved to 0d7088d47928, scanned 14 Sept 2026: 67 findings, 3 critical, 2 on KEV; deployed by 1 chart, among them drogue-cloud-core.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
67 distinct on this digest
Findings for digest 0d7088d47928 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2023-38545 | curl | 8.4.0-r0 |
| Critical | ALPINE-CVE-2023-4863KEV | libwebp | 1.2.2-r2 |
| Critical | ALPINE-CVE-2023-44487KEV | nghttp2 | 1.46.0-r2 |
| High | ALPINE-CVE-2023-0286 | openssl | 1.1.1t-r0 |
| High | ALPINE-CVE-2022-32214 | nodejs | 16.17.1-r0 |
| High | ALPINE-CVE-2023-2650 | openssl | 1.1.1u-r0 |
| High | ALPINE-CVE-2022-32215 | nodejs | 16.17.1-r0 |
| High | ALPINE-CVE-2022-37434 | zlib | 1.2.12-r2 |
| High | ALPINE-CVE-2022-32213 | nodejs | 16.17.1-r0 |
| High | ALPINE-CVE-2022-40303 | libxml2 | 2.9.14-r2 |
| High | ALPINE-CVE-2022-32206 | curl | 7.80.0-r2 |
| High | ALPINE-CVE-2022-4450 | openssl | 1.1.1t-r0 |
| High | ALPINE-CVE-2022-43551 | curl | 7.80.0-r5 |
| High | ALPINE-CVE-2022-32207 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-32221 | curl | 7.80.0-r4 |
| Medium | ALPINE-CVE-2022-4304 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2022-40304 | libxml2 | 2.9.14-r2 |
| Medium | ALPINE-CVE-2022-1586 | pcre2 | 10.40-r0 |
| Medium | ALPINE-CVE-2022-32205 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-1587 | pcre2 | 10.40-r0 |
| Medium | ALPINE-CVE-2023-0215 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2022-42915 | curl | 7.80.0-r4 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 1.1.1t-r2 |
| Medium | ALPINE-CVE-2023-32002 | nodejs | 16.20.2-r0 |
| Medium | ALPINE-CVE-2023-27534 | curl | 8.0.1-r0 |
| Medium | ALPINE-CVE-2022-32208 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-35255 | nodejs | 16.17.1-r0 |
| Medium | ALPINE-CVE-2022-27406 | freetype | 2.11.1-r2 |
| Medium | ALPINE-CVE-2023-27533 | curl | 8.0.1-r0 |
| Medium | ALPINE-CVE-2022-27782 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-27405 | freetype | 2.11.1-r2 |
| Medium | ALPINE-CVE-2022-27781 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2022-2309 | libxml2 | 2.9.14-r1 |
| Medium | ALPINE-CVE-2023-32006 | nodejs | 16.20.2-r0 |
| Medium | ALPINE-CVE-2023-28319 | curl | 8.1.0-r0 |
| Medium | ALPINE-CVE-2022-27780 | curl | 7.80.0-r2 |
| Medium | ALPINE-CVE-2023-3446 | openssl | 1.1.1u-r2 |
| Medium | ALPINE-CVE-2023-23919 | nodejs | 16.19.1-r0 |
| Medium | ALPINE-CVE-2023-23918 | nodejs | 16.19.1-r0 |
| Medium | ALPINE-CVE-2022-42916 | curl | 7.80.0-r4 |
| Medium | ALPINE-CVE-2023-32559 | nodejs | 16.20.2-r0 |
| Medium | ALPINE-CVE-2022-35256 | nodejs | 16.17.1-r0 |
| Medium | ALPINE-CVE-2022-2097 | openssl | 1.1.1q-r0 |
| Medium | ALPINE-CVE-2023-5678 | openssl | 1.1.1w-r1 |
| Medium | ALPINE-CVE-2023-23914 | curl | 7.80.0-r6 |
| Medium | ALPINE-CVE-2023-24807 | nodejs | 16.19.1-r0 |
| Medium | ALPINE-CVE-2023-28320 | curl | 8.1.0-r0 |
| Medium | ALPINE-CVE-2023-35945 | nghttp2 | 1.46.0-r1 |
| Medium | ALPINE-CVE-2022-43552 | curl | 7.80.0-r5 |
| Medium | ALPINE-CVE-2022-29458 | ncurses | 6.3_p20211120-r1 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| drogue-cloud-coredrogue-iotVerified publisher | 0.7.11 | v4.12.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.