thingsboard/tb-node:3.6.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of thingsboard/tb-node
thingsboard/tb-node:3.6.0 resolved to f40a542832c4, scanned 14 Sept 2026: 314 findings, 2 critical, 4 on KEV; deployed by 1 chart, among them thingsboard-cluster.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
314 distinct on this digest
Findings for digest f40a542832c4 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-wc96-39fc-566f | netty-handler-ssl-ocsp | 4.1.136.Final |
| Low | GHSA-9cmq-m9j5-mvww | spring-expression | 5.3.39 |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | DLA-4492-1 | gnutls28 | 3.7.1-5+deb11u9 |
| Low | GHSA-xpw8-rcwv-8f8p | netty-codec-http2 | 4.1.100.Final |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GHSA-q3v6-hm2v-pw99 | spring-security-core | 5.7.14 |
| Low | DLA-4346-1 | openjdk-11 | 11.0.29+6-1~deb11u1 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | DSA-5517-1 | libx11 | 2:1.7.2-1+deb11u2 |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.3.16 |
| Low | DLA-4176-1 | openssl | 1.1.1w-0+deb11u3 |
| Low | DLA-3930-1 | libsepol | 3.1-1+deb11u1 |
| Low | GHSA-r978-9m6m-6gm6 | zookeeper | 3.8.4 |
| Low | DLA-4181-1 | glibc | 2.31-13+deb11u13 |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | DLA-4065-1 | krb5 | 1.18.3-6+deb11u6 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | no fix listed |
| Low | DLA-4128-1 | glib2.0 | 2.66.8-1+deb11u6 |
| Low | DLA-4306-1 | pam | 1.4.0-9+deb11u2 |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | no fix listed |
| Low | DLA-4130-1 | shadow | 1:4.8.1-1+deb11u1 |
| Low | DLA-4396-1 | libpng1.6 | 1.6.37-3+deb11u1 |
| Low | DLA-4491-1 | glib2.0 | 2.66.8-1+deb11u8 |
| Low | DLA-3990-1 | avahi | 0.8-5+deb11u3 |
| Low | GHSA-5m9f-rphj-c435 | amqp-client | 5.33.0 |
| Low | GHSA-5p82-2q3r-wj3m | application | 4.2.1 |
| Low | GHSA-7fch-4f2f-jcgm | spring-websocket | no fix listed |
| Low | GHSA-wh89-7897-x99h | netty-codec-haproxy | 4.1.136.Final |
| Low | DLA-4508-1 | nss | 2:3.61-1+deb11u5 |
| Low | DLA-4143-1 | glibc | 2.31-13+deb11u12 |
| Low | DLA-4195-1 | krb5 | 1.18.3-6+deb11u7 |
| Low | GHSA-m452-q8c9-rg2f | async-http-client | 2.16.0 |
| Low | GHSA-q723-847q-5g8g | spring-websocket | no fix listed |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 9.0.118 |
| Low | GHSA-659m-px2c-25wj | spring-core | no fix listed |
| Low | GHSA-ggg2-9786-hwc8 | spring-boot-autoconfigure | no fix listed |
| Low | GHSA-4wp7-92pw-q264 | spring-context | no fix listed |
| Low | DLA-4469-1 | alsa-lib | 1.2.4-1.1+deb11u1 |
| Low | GHSA-p53j-g8pw-4w5f | eddsa | no fix listed |
| Low | GHSA-vxf7-qj7q-83fh | spring-security-core | no fix listed |
| Low | GHSA-h3qp-gqrc-q736 | spring-webmvc | no fix listed |
| Low | DLA-4437-1 | gnupg2 | 2.2.27-2+deb11u3 |
| Low | GHSA-9f52-rjqv-25qv | spring-expression | no fix listed |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-kqueue | 4.1.135.Final |
| Low | GHSA-wg35-8jpf-2xv3 | spring-webmvc | no fix listed |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| thingsboard-clusterthingsboard-cluster-bettaVerified publisher | 0.2.26 | 3.6.0 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.