thingsboard/tb-node:3.4.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of thingsboard/tb-node
thingsboard/tb-node:3.4.1 resolved to 645f43b688f7, scanned 14 Sept 2026: 341 findings, 3 critical, 4 on KEV; deployed by 1 chart, among them thingsboard.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
233 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 645f43b688f7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-3chg-m5w7-qfv5 | spring-webmvc | no fix listed |
| Low | GHSA-2827-2mxx-j8pv | spring-retry | no fix listed |
| Low | DLA-4457-1 | openjdk-11 | 11.0.30+7-1~deb11u1 |
| Low | DLA-4490-1 | openssl | 1.1.1w-0+deb11u5 |
| Low | GHSA-fpq4-r87v-g246 | application | 4.2.1 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GHSA-xg2j-3hj6-pc24 | spring-data-keyvalue | no fix listed |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | no fix listed |
| Low | DEBIAN-CVE-2024-21144 | openjdk-11 | 11.0.24+8-2~deb11u1 |
| Low | DLA-4412-1 | glib2.0 | 2.66.8-1+deb11u7 |
| Low | DLA-4174-1 | openjdk-11 | 11.0.27+6-1~deb11u1 |
| Low | DSA-5353-1 | nss | 2:3.61-1+deb11u3 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-562r-vg33-8x8h | postgresql | 42.2.27 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | no fix listed |
| Low | DLA-4259-1 | systemd | 247.3-7+deb11u7 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | DSA-5682-1 | glib2.0 | 2.66.8-1+deb11u2 |
| Low | GHSA-x2r2-rvhq-2mqv | spring-security-web | no fix listed |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | DLA-3875-1 | gnutls28 | 3.7.1-5+deb11u6 |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-9cmq-m9j5-mvww | spring-expression | 5.3.39 |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | DLA-4492-1 | gnutls28 | 3.7.1-5+deb11u9 |
| Low | GHSA-xpw8-rcwv-8f8p | netty-codec-http2 | 4.1.100.Final |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GHSA-q3v6-hm2v-pw99 | spring-security-core | 5.7.14 |
| Low | DLA-4346-1 | openjdk-11 | 11.0.29+6-1~deb11u1 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | DSA-5517-1 | libx11 | 2:1.7.2-1+deb11u2 |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.3.16 |
| Low | DLA-4176-1 | openssl | 1.1.1w-0+deb11u3 |
| Low | DLA-3930-1 | libsepol | 3.1-1+deb11u1 |
| Low | DLA-4181-1 | glibc | 2.31-13+deb11u13 |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | DLA-4065-1 | krb5 | 1.18.3-6+deb11u6 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | no fix listed |
| Low | DLA-4128-1 | glib2.0 | 2.66.8-1+deb11u6 |
| Low | DLA-4306-1 | pam | 1.4.0-9+deb11u2 |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | no fix listed |
| Low | DLA-4130-1 | shadow | 1:4.8.1-1+deb11u1 |
| Low | DLA-4396-1 | libpng1.6 | 1.6.37-3+deb11u1 |
| Low | DLA-4491-1 | glib2.0 | 2.66.8-1+deb11u8 |
| Low | DLA-3990-1 | avahi | 0.8-5+deb11u3 |
| Low | GHSA-5m9f-rphj-c435 | amqp-client | 5.33.0 |
| Low | GHSA-5p82-2q3r-wj3m | application | 4.2.1 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| thingsboardthingsboardVerified publisher | 0.1.3 | 3.4.1 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.