thingsboard/tb-postgres:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of thingsboard/tb-postgres
thingsboard/tb-postgres:latest resolved to 2d17e4e36edc, scanned 14 Sept 2026: 500 findings, 0 critical; deployed by 1 chart, among them thingsboard.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
500 distinct on this digest
Findings for digest 2d17e4e36edc as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-42011 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | GHSA-v74w-7mr3-4qg3 | netty-codec-xml | 4.1.136.Final |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | GHSA-x4m4-345f-5h5g | tomcat-embed-core | 10.1.54 |
| Low | GHSA-93wv-jw9v-4972 | netty-codec-http2 | 4.1.136.Final |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | GHSA-6jqx-86gh-f27w | netty-codec-http | 4.1.136.Final |
| Low | DEBIAN-CVE-2026-0990 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | DEBIAN-CVE-2026-21932 | openjdk-17 | 17.0.18+8-1~deb12u1 |
| Low | DEBIAN-CVE-2025-7458 | sqlite3 | no fix listed |
| Low | GHSA-mvh2-crg5-v77c | netty-codec-http | 4.1.136.Final |
| Low | GHSA-vhch-2wf3-m8rp | netty-codec-stomp | 4.1.136.Final |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 10.1.50 |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-2219 | dpkg | 1.21.23 |
| Low | DEBIAN-CVE-2026-42497 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-41992 | gzip | no fix listed |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 10.1.47 |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-c3fc-8qff-9hwx | bcprov-jdk18on | 1.84 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | 6.2.19 |
| Low | GHSA-x23c-287f-qqv5 | spring-webflux | 6.2.19 |
| Low | DEBIAN-CVE-2026-75803 | openssl | no fix listed |
| Low | GHSA-676x-f7gg-47vc | netty-resolver-dns | 4.1.135.Final |
| Low | DEBIAN-CVE-2026-4046 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk18on | 1.84 |
| Low | DEBIAN-CVE-2025-14512 | glib2.0 | 2.74.6-2+deb12u8 |
| Low | DEBIAN-CVE-2026-48959 | perl | no fix listed |
| Low | GHSA-2qj4-mmr9-4v2f | netty-transport-sctp | 4.1.137.Final |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-41254 | openjdk-17 | 17.0.20+8-1~deb12u1 |
| Low | DEBIAN-CVE-2026-41254 | lcms2 | 2.14-2+deb12u1 |
| Low | GHSA-88fw-v6x4-3f58 | spring-data-commons | no fix listed |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | no fix listed |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | 6.2.19 |
| Low | DEBIAN-CVE-2026-6791 | glibc | no fix listed |
| Low | DEBIAN-CVE-2022-27943 | gcc-12 | no fix listed |
| Low | DEBIAN-CVE-2025-13601 | glib2.0 | 2.74.6-2+deb12u8 |
| Low | DEBIAN-CVE-2025-61915 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-6g32-pxv4-2wfj | amqp-client | 5.33.0 |
| Low | GHSA-j92g-9f8w-j867 | postgresql | 42.7.12 |
| Low | DEBIAN-CVE-2021-45346 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DEBIAN-CVE-2025-70873 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-42012 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-57432 | perl | no fix listed |
| Low | GHSA-xx22-p4ch-683r | lz4-java | 1.11.1 |
| Low | GHSA-xxqh-mfjm-7mv9 | netty-codec-http | 4.1.133.Final |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| thingsboardcetic | 0.1.2 | latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.