thingsboard/tb-node:3.6.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of thingsboard/tb-node

thingsboard/tb-node:3.6.0 resolved to f40a542832c4, scanned 14 Sept 2026: 314 findings, 2 critical, 4 on KEV; deployed by 1 chart, among them thingsboard-cluster.

Radar Score

4,48021274225

314 findings on digest f40a542832c4 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.6.0resolves to	f40a542832c4	1 chart	8 days ago	21274225	4,480

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

74 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest f40a542832c4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	DLA-3859-1	systemd@247.3-7+deb11u2	247.3-7+deb11u6
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.26	no fix listed
Medium	DSA-5673-1	glibc@2.31-13+deb11u6	2.31-13+deb11u9
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.5.0	42.5.5
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u4	1.1.1n-0+deb11u5
Medium	DLA-3904-1	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9
Medium	DLA-3942-1	openssl@1.1.1n-0+deb11u4	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u2
Medium	GHSA-3h6f-g5f3-gc4w	spring-security-config@5.7.7	5.7.10
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.26	5.3.32
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.73	9.0.90
Medium	GHSA-3p86-9955-h393	org.eclipse.jgit@6.1.0.202203080745-r	6.6.1.202309021850-r
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.73	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.73	9.0.118
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.5.0	42.7.11
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.73	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.26	5.3.33
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@5.7.7	5.7.13
Medium	GHSA-7286-pgfv-vxvh	zookeeper@3.8.1	3.8.3
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.21.9	3.25.5
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.73	9.0.118
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.73	9.0.83
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.73	9.0.90
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.7.10	2.7.11
Medium	GHSA-jq43-27x9-3v86	netty-codec-smtp@4.1.91.Final	4.1.128.Final
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.91.Final	4.1.118.Final
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.73	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.73	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.73	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.73	9.0.118
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.73	9.0.107
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.73	9.0.107
Medium	GHSA-crhr-qqj8-rpxc	zookeeper@3.8.1	3.8.6
Medium	GHSA-qcwq-55hx-v3vh	snappy-java@1.1.8.4	1.1.10.1
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.91.Final	4.1.132.Final
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.73	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.73	9.0.121
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.91.Final	4.1.94.Final
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@5.3.26	5.3.34
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.4	3.18.0
Medium	GHSA-v682-8vv8-vpwr	tomcat-embed-websocket@9.0.73	9.0.86
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.11.0	2.14.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.91.Final	4.1.135.Final
Medium	GHSA-f3jh-qvm4-mg39	spring-security-core@5.7.7	5.7.12
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@9.0.73	9.0.121
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.13.4.2	2.18.8
Medium	GHSA-wxqc-pxw9-g2p8	spring-expression@5.3.26	5.3.27
Medium	GHSA-493p-pfq6-5258	json-smart@2.4.7	2.4.9
Medium	GHSA-2p5w-cvg5-gc5c	hibernate-core@5.6.15.Final	no fix listed
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.13.4.2	2.18.8

Used by

1 chart

Chart	Version	Tag	Containers
thingsboard-clusterthingsboard-cluster-bettaVerified publisher	0.2.26	3.6.0	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.