StackRadar

tooljet/tooljet-ce:v1.18.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of tooljet/tooljet-ce

tooljet/tooljet-ce:v1.18.0 resolved to c85a4720e42e, scanned 14 Sept 2026: 386 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them tooljet.

Radar Score

5,41006101279

386 findings on digest c85a4720e42e · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.18.0resolves toc85a4720e42e1 chart6 days ago061012795,410

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

386 distinct on this digest

Findings for digest c85a4720e42e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-3965-hpx2-q597pug-code-gen@3.0.23.0.3
LowGHSA-3965-hpx2-q597pug@3.0.23.0.3
LowGHSA-rm97-x556-q36hsanitize-html@2.7.02.12.1
LowGHSA-wf5p-g6vw-rhxxaxios@0.26.00.28.0
LowDLA-3429-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u5
LowGHSA-w5hq-g745-h8pquuid@8.3.211.1.1
LowDLA-3782-1util-linux@2.33.1-0.12.33.1-0.1+deb10u1
LowDLA-3586-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u4
LowDLA-3692-1curl@7.64.0-4+deb10u27.64.0-4+deb10u8
LowDLA-3119-1expat@2.2.6-2+deb10u12.2.6-2+deb10u5
LowGHSA-2328-f5f3-gj25node-forge@1.2.11.4.0
LowDLA-3763-1curl@7.64.0-4+deb10u27.64.0-4+deb10u9
LowDLA-3263-1libtasn1-6@4.13-34.13-3+deb10u1
LowDLA-3758-1tiff@4.1.0+git191117-2~deb10u24.1.0+git191117-2~deb10u9
LowGHSA-9ppj-qmqm-q256tar@4.4.137.5.11
LowGHSA-qwph-4952-7xr6jsonwebtoken@8.5.19.0.0
LowGHSA-m5vv-6r4h-3vj9@azure/identity@1.5.24.2.1
LowGHSA-mpwj-fcr6-x34cyarn@1.22.51.22.13
LowGHSA-2r2c-g63r-vccrnode-forge@1.2.11.3.0
LowGHSA-968p-4wvh-cqc8@babel/runtime@7.16.77.26.10
LowGHSA-3p68-rc4w-qgx5axios@0.26.00.31.0
LowDLA-3398-1curl@7.64.0-4+deb10u27.64.0-4+deb10u6
LowGHSA-wc9g-mqfw-jrwmmulter@1.4.42.3.0
LowGHSA-7fh5-64p2-3v2jpostcss@8.4.128.4.31
LowDLA-3072-1postgresql-11@11.14-0+deb10u111.17-0+deb10u1
LowGHSA-xwg4-73v4-xw9wnanoid@3.3.23.3.12
LowDLA-3070-1gnutls28@3.6.7-4+deb10u73.6.7-4+deb10u9
LowDLA-3236-1openexr@2.2.1-4.1+deb10u12.2.1-4.1+deb10u2
LowGHSA-f886-m6hf-6m8vbrace-expansion@1.1.111.1.13
LowGHSA-535w-7cp7-47q4multer@1.4.42.3.0
LowGHSA-72gw-mp4g-v24jmulter@1.4.42.2.0
LowGHSA-v923-w3x8-wh69passport@0.4.10.6.0
LowDLA-3783-1expat@2.2.6-2+deb10u12.2.6-2+deb10u7
LowDLA-3240-1libde265@1.0.3-1+b11.0.3-1+deb10u1
LowDLA-3280-1libde265@1.0.3-1+b11.0.3-1+deb10u3
LowDLA-3764-1postgresql-11@11.14-0+deb10u111.22-0+deb10u2
LowGHSA-6h8r-xr42-gp59@xmldom/xmldom@0.7.50.8.15
LowDLA-3722-1mariadb-10.3@1:10.3.29-0+deb10u11:10.3.39-0+deb10u2
LowGHSA-fxqj-rqcc-2cmppostcss@8.4.128.5.23
LowDLA-3278-1tiff@4.1.0+git191117-2~deb10u24.1.0+git191117-2~deb10u5
LowDLA-3341-1curl@7.64.0-4+deb10u27.64.0-4+deb10u5
LowDLA-3600-1postgresql-11@11.14-0+deb10u111.21-0+deb10u2
LowDLA-3472-1libx11@2:1.6.7-1+deb10u22:1.6.7-1+deb10u3
LowDLA-3153-1libksba@1.3.5-21.3.5-2+deb10u1
LowGHSA-4jpv-8r57-pv7j@nestjs/core@8.0.09.0.5
LowDLA-3740-1gnutls28@3.6.7-4+deb10u73.6.7-4+deb10u12
LowGHSA-83g3-92jg-28cxtar@4.4.137.5.8
LowGHSA-c2jc-4fpr-4vhg@sideway/formula@3.0.03.0.1
LowGHSA-7v5v-9h63-cj86@grpc/grpc-js@1.4.61.8.22
LowDLA-3248-1libksba@1.3.5-21.3.5-2+deb10u2

Used by

1 chart
ChartVersionTagContainers
tooljetkrzwiatrzyk1.1.1v1.18.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.