thingsboard/tb-node:3.6.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of thingsboard/tb-node

thingsboard/tb-node:3.6.0 resolved to f40a542832c4, scanned 14 Sept 2026: 314 findings, 2 critical, 4 on KEV; deployed by 1 chart, among them thingsboard-cluster.

Radar Score

4,48021274225

314 findings on digest f40a542832c4 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.6.0resolves to	f40a542832c4	1 chart	8 days ago	21274225	4,480

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

225 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest f40a542832c4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.73	9.0.113
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.73	9.0.110
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.91.Final	4.1.136.Final
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.3.26	no fix listed
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.22	9.37.4
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.69	1.78
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.91.Final	4.1.135.Final
Low	GHSA-mjmq-gwgm-5qhm	sshd-sftp@2.8.0	2.9.3
Low	GHSA-x873-6rgc-94jc	spring-security-core@5.7.7	5.7.8
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.7.10	no fix listed
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.69	1.84
Low	DSA-5478-1	openjdk-11@11.0.18+10-1~deb11u1	11.0.20+8-1~deb11u1
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.69	1.78
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@9.0.73	9.0.106
Low	GHSA-2qj4-mmr9-4v2f	netty-transport-sctp@4.1.91.Final	4.1.137.Final
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.69	no fix listed
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@2.7.10	no fix listed
Low	GHSA-v2xm-76pq-phcf	classgraph@4.8.83	4.8.112
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.3.26	no fix listed
Low	DEBIAN-CVE-2026-47058	openjdk-11@11.0.18+10-1~deb11u1	11.0.32+9-2~deb11u1
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GHSA-6g32-pxv4-2wfj	amqp-client@4.8.0	5.33.0
Low	GHSA-fmxf-pm6p-7xgm	async-http-client@2.12.1	2.15.0
Low	GHSA-2rmj-mq67-h97g	spring-web@5.3.26	5.3.38
Low	GHSA-mm8h-8587-p46h	amqp-client@4.8.0	5.18.0
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.73	9.0.116
Low	DSA-5726-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u5
Low	DEBIAN-CVE-2025-30761	openjdk-11@11.0.18+10-1~deb11u1	11.0.28+6-1~deb11u1
Low	DLA-3893-1	expat@2.2.10-2+deb11u5	2.2.10-2+deb11u6
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.91.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.69	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.69	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@5.3.26	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.91.Final	4.1.136.Final
Low	GHSA-w3c8-7r8f-9jp8	spring-webmvc@5.3.26	5.3.42
Low	GHSA-pcf2-gh6g-h5r2	antisamy@1.7.2	1.7.4
Low	DSA-5433-1	libx11@2:1.7.2-1	2:1.7.2-1+deb11u1
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.20.Final	6.2.0.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.91.Final	4.1.136.Final
Low	GHSA-cmxv-58fp-fm3g	async-http-client@2.12.1	2.14.5
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	DLA-4321-1	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.10	1.3.15
Low	GHSA-wf66-mphr-4c4r	kafka-clients@3.2.0	3.9.2
Low	GHSA-qx7j-jv8m-fppr	amqp-client@4.8.0	5.31.0
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.10	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.3.26	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.3.26	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
thingsboard-clusterthingsboard-cluster-bettaVerified publisher	0.2.26	3.6.0	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.