StackRadar

temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of temporalio/admin-tools

temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0 resolved to cda4901bab53, scanned 14 Sept 2026: 217 findings, 2 critical, 1 on KEV; deployed by 1 chart, among them temporal.

Radar Score

2,7632747161

217 findings on digest cda4901bab53 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.25.0-tctl-1.18.1-cli-1.0.0resolves tocda4901bab531 chart8 days ago27471612,763

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

217 distinct on this digest

Findings for digest cda4901bab53 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.25.00.52.0
MediumALPINE-CVE-2025-0938python3@3.11.9-r03.11.12-r0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.25.00.35.0
MediumALPINE-CVE-2023-27043python3@3.11.9-r03.11.10-r0
MediumALPINE-CVE-2024-2466curl@8.5.0-r08.7.1-r0
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.20.00.27.0
LowPYSEC-2026-2132click@8.1.78.3.3
LowALPINE-CVE-2024-56406perl@5.38.2-r05.38.3-r1
LowGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.25.00.52.0
LowGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.25.00.52.0
LowALPINE-CVE-2024-9287python3@3.11.9-r03.11.11-r0
LowGHSA-mh63-6h87-95cpgithub.com/golang-jwt/jwt/v4@v4.5.04.5.2
LowGHSA-mh63-6h87-95cpgithub.com/golang-jwt/jwt@v3.2.2+incompatibleno fix listed
LowALPINE-CVE-2025-8715postgresql16@16.3-r016.10-r0
LowGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.65.01.83.1
LowGHSA-8wv5-x4w7-5gwwgithub.com/apache/thrift@v0.20.00.24.0
LowALPINE-CVE-2025-29087sqlite@3.44.2-r03.44.2-r1
LowALPINE-CVE-2024-50602expat@2.6.2-r02.6.4-r0
LowALPINE-CVE-2024-8096curl@8.5.0-r08.10.0-r0
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.25.00.52.0
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.25.00.52.0
LowALPINE-CVE-2024-6923python3@3.11.9-r03.11.10-r0
LowGHSA-vfp3-v2gw-7wfqgithub.com/labstack/echo/v4@v4.9.14.15.3
LowALPINE-CVE-2024-4603openssl@3.1.4-r53.1.5-r0
LowALPINE-CVE-2024-0853curl@8.5.0-r08.6.0-r0
LowGHSA-wf93-45jw-7689pip@23.3.126.1.2
LowGHSA-c5q2-7r4c-mv6ggopkg.in/square/go-jose.v2@v2.6.0no fix listed
LowALPINE-CVE-2025-21490mariadb@10.11.6-r010.11.11-r0
LowALPINE-CVE-2025-4207postgresql16@16.3-r016.9-r0
LowGO-2026-4341stdlib@go1.22.31.24.12
LowGHSA-q98v-9f9w-f49qgo.temporal.io/server@v0.0.0-20240906203326-1d0c6644b6751.28.4
LowGHSA-p768-c3pr-6459go.temporal.io/server@v0.0.0-20240906203326-1d0c6644b6751.26.3
LowGO-2024-2887stdlib@go1.22.31.21.11
LowALPINE-CVE-2024-10976postgresql16@16.3-r016.5-r0
LowALPINE-CVE-2025-26519musl@1.2.4_git20230717-r41.2.4_git20230717-r5
LowALPINE-CVE-2024-12718python3@3.11.9-r03.11.13-r0
LowGHSA-hfvc-g4fc-pqhxgo.opentelemetry.io/otel/sdk@v1.27.01.43.0
LowGHSA-4xh5-x5gv-qwphpip@23.3.125.3
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.25.00.52.0
LowGHSA-h35f-9h28-mq5csetuptools@65.5.083.0.0
LowGO-2024-2963stdlib@go1.22.31.21.12
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.27.00.55.0
LowALPINE-CVE-2026-40200musl@1.2.4_git20230717-r41.2.4_git20230717-r6
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.25.00.45.0
LowPYSEC-2026-3721pip@23.3.126.2
LowGHSA-vvgc-356p-c3xwgolang.org/x/net@v0.27.00.38.0
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.65.01.83.1
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.25.00.52.0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.25.00.45.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.25.00.52.0

Used by

1 chart
ChartVersionTagContainers
temporalglasskubeVerified publisher0.45.2-gk.11.25.0-tctl-1.18.1-cli-1.0.011

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.