tooljet/tooljet-ce:v1.18.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of tooljet/tooljet-ce

tooljet/tooljet-ce:v1.18.0 resolved to c85a4720e42e, scanned 14 Sept 2026: 386 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them tooljet.

Radar Score

5,41006101279

386 findings on digest c85a4720e42e · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v1.18.0resolves to	c85a4720e42e	1 chart	6 days ago	06101279	5,410

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

279 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest c85a4720e42e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-44fp-w29j-9vj5	multer@1.4.4	2.0.0
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	GHSA-cfm4-qjh2-4765	node-forge@1.2.1	1.3.0
Low	GHSA-v62p-rq8g-8h59	pbkdf2@3.1.2	3.1.3
Low	DLA-3614-1	python3.7@3.7.3-2+deb10u3	3.7.3-2+deb10u6
Low	DSA-5122-1	gzip@1.9-3	1.9-3+deb10u1
Low	DSA-5123-1	xz-utils@5.2.4-1	5.2.4-1+deb10u1
Low	GHSA-62hf-57xw-28j9	axios@0.26.0	0.31.1
Low	GHSA-h7cp-r72f-jxh6	pbkdf2@3.1.2	3.1.3
Low	GHSA-x6wf-f3px-wcqx	@xmldom/xmldom@0.7.5	0.8.13
Low	DSA-5073-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u2
Low	GHSA-34x7-hfp2-rc4v	tar@4.4.13	7.5.7
Low	GHSA-mq66-vcfc-8246	mercurial@4.8.2	4.9
Low	GHSA-fjgf-rc76-4x9p	multer@1.4.4	2.0.2
Low	GHSA-g5hg-p3ph-g8qg	multer@1.4.4	2.0.1
Low	GHSA-3g43-6gmg-66jw	axios@0.26.0	0.31.1
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.14.7	1.15.6
Low	GHSA-ph9p-34f9-6g65	tmp@0.2.1	0.2.6
Low	GHSA-554w-wpv2-vw27	node-forge@1.2.1	1.3.2
Low	GHSA-hfxv-24rg-xrqf	axios@0.26.0	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.26.0	0.32.0
Low	DLA-3288-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u4
Low	DLA-3651-1	postgresql-11@11.14-0+deb10u1	11.22-0+deb10u1
Low	GHSA-685m-2w69-288q	protobufjs@6.11.2	7.5.6
Low	GHSA-75px-5xx7-5xc7	protobufjs@6.11.2	7.5.6
Low	GHSA-rqff-837h-mm52	url-parse@1.5.4	1.5.6
Low	DSA-5087-1	cyrus-sasl2@2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-5375-pq7m-f5r2	@grpc/grpc-js@1.4.6	1.9.16
Low	GHSA-pw2r-vq6v-hr8c	follow-redirects@1.14.7	1.14.8
Low	GHSA-f5x3-32g6-xq36	tar@4.4.13	6.2.1
Low	GHSA-8cf7-32gw-wr33	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-j8xg-fqg3-53r7	word-wrap@1.2.3	1.2.4
Low	GHSA-5m6q-g25r-mvwx	node-forge@1.2.1	1.4.0
Low	GHSA-6g55-p6wh-862q	postcss@8.4.12	8.5.12
Low	GHSA-pmwg-cvhr-8vh7	axios@0.26.0	0.31.1
Low	GHSA-qffp-2rhf-9h96	tar@4.4.13	7.5.10
Low	GHSA-22p9-wv53-3rq4	linkify-it@3.0.3	5.0.1
Low	GHSA-j759-j44w-7fr8	@xmldom/xmldom@0.7.5	0.8.13
Low	DSA-5142-1	libxml2@2.9.4+dfsg1-7+deb10u2	2.9.4+dfsg1-7+deb10u4
Low	DSA-5032-1	djvulibre@3.5.27.1-10	3.5.27.1-10+deb10u1
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.13	7.5.19
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.7.5	0.8.15
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.7.5	0.8.15
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.0	4.3.0
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.7.5	0.8.15
Low	GHSA-4w3w-2rp5-g8jm	@xmldom/xmldom@0.7.5	0.8.14
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.7.5	0.8.15

Used by

1 chart

Chart	Version	Tag	Containers
tooljetkrzwiatrzyk	1.1.1	v1.18.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.