StackRadar

tooljet/tooljet-ce:v1.18.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of tooljet/tooljet-ce

tooljet/tooljet-ce:v1.18.0 resolved to c85a4720e42e, scanned 14 Sept 2026: 386 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them tooljet.

Radar Score

5,41006101279

386 findings on digest c85a4720e42e · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.18.0resolves toc85a4720e42e1 chart5 days ago061012795,410

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

101 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest c85a4720e42e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumDLA-3736-1unbound@1.9.0-2+deb10u21.9.0-2+deb10u4
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumDSA-5169-1openssl@1.1.1d-0+deb10u61.1.1n-0+deb10u3
MediumDLA-3694-1openssh@1:7.9p1-10+deb10u21:7.9p1-10+deb10u4
MediumDLA-3357-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u2
MediumDLA-3145-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u4
MediumDLA-3807-1glibc@2.28-102.28-10+deb10u3
MediumDSA-4963-1openssl@1.1.1d-0+deb10u61.1.1d-0+deb10u7
MediumDLA-3804-1nghttp2@1.36.0-2+deb10u11.36.0-2+deb10u3
MediumDSA-5139-1openssl@1.1.1d-0+deb10u61.1.1n-0+deb10u2
MediumDLA-3532-1openssh@1:7.9p1-10+deb10u21:7.9p1-10+deb10u3
MediumDLA-3449-1openssl@1.1.1d-0+deb10u61.1.1n-0+deb10u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u61.1.1d-0+deb10u8
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-r628-mhmh-qjhwtar@4.4.134.4.15
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u62.4.47+dfsg-3+deb10u7
MediumDLA-3325-1openssl@1.1.1d-0+deb10u61.1.1n-0+deb10u4
MediumDLA-3282-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u7
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-cph5-m8f7-6c5xaxios@0.19.20.21.2
MediumGHSA-9c47-m6qq-7p4hjson5@2.2.12.2.2
MediumDLA-3844-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u9
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumGHSA-x3cc-x39p-42qxfast-xml-parser@3.19.04.1.2
MediumGHSA-8hfj-j24r-96c4moment@2.29.12.29.2
MediumDLA-3575-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u3
MediumDSA-5085-1expat@2.2.6-2+deb10u12.2.6-2+deb10u3
MediumGHSA-wc69-rhjr-hc9gmoment@2.29.12.29.4
MediumGHSA-p6mc-m468-83gwlodash.set@4.3.2no fix listed
MediumDLA-3085-1curl@7.64.0-4+deb10u27.64.0-4+deb10u3
MediumGHSA-fj58-h2fr-3pp2class-validator@0.13.20.14.0
MediumGHSA-9r2w-394v-53qctar@4.4.134.4.16
MediumGHSA-fwr7-v2mv-hh25async@2.6.32.6.4
MediumGHSA-h755-8qp9-cq85protobufjs@6.11.26.11.4
MediumGHSA-93q8-gq69-wqmwansi-regex@3.0.03.0.1
MediumDLA-3432-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u2
MediumGHSA-fjxv-7rqg-78g4form-data@4.0.04.0.4
MediumDLA-3172-1libxml2@2.9.4+dfsg1-7+deb10u22.9.4+dfsg1-7+deb10u5
MediumGHSA-wm7h-9275-46v2dicer@0.2.5no fix listed
MediumDLA-3101-1libxslt@1.1.32-2.2~deb10u11.1.32-2.2~deb10u2
MediumGHSA-hgjh-723h-mx2jurl-parse@1.5.41.5.8
MediumGHSA-74fj-2j2h-c42qfollow-redirects@1.5.101.14.7
MediumGHSA-crh6-fp67-6883@xmldom/xmldom@0.7.50.7.7
MediumGHSA-c2qf-rxjj-qqgwsemver@5.7.15.7.2
MediumGHSA-43fc-jf86-j433axios@0.26.00.30.3
MediumDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
MediumDSA-5135-1postgresql-11@11.14-0+deb10u111.16-0+deb10u1
MediumGHSA-qq89-hq3f-393ptar@4.4.134.4.18
MediumGHSA-g954-5hwp-pp24protobufjs@6.11.26.11.3

Used by

1 chart
ChartVersionTagContainers
tooljetkrzwiatrzyk1.1.1v1.18.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.