StackRadar

tooljet/tooljet-ce:v1.18.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of tooljet/tooljet-ce

tooljet/tooljet-ce:v1.18.0 resolved to c85a4720e42e, scanned 14 Sept 2026: 386 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them tooljet.

Radar Score

5,41006101279

386 findings on digest c85a4720e42e · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.18.0resolves toc85a4720e42e1 chart6 days ago061012795,410

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

386 distinct on this digest

Findings for digest c85a4720e42e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-9ggv-8w38-r7pmtypeorm@0.2.410.3.29
LowDLA-3755-1tar@1.30+dfsg-61.30+dfsg-6+deb10u1
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.111.1.12
LowGHSA-v78c-4p63-2j6cmoment-timezone@0.5.340.5.35
LowDLA-3579-1elfutils@0.176-1.10.176-1.1+deb10u1
LowGHSA-c7w3-x93f-qmm8nodemailer@6.7.28.0.4
LowGHSA-gg4h-3hg2-grpcjoi@17.4.117.13.5
LowGHSA-6w3j-5fw6-r9vrjoi@17.4.117.13.6
LowGHSA-78xj-cgh5-2h22ip@1.1.51.1.9
LowGHSA-xhjh-pmcv-23jwaxios@0.26.00.31.1
LowGHSA-qvfw-j98x-7q72multer@1.4.42.3.0
LowGHSA-4g6q-77j7-vvjc@google-cloud/firestore@5.0.16.1.0
LowDLA-3112-1bzip2@1.0.6-9.2~deb10u11.0.6-9.2~deb10u2
LowDLA-3114-2mariadb-10.3@1:10.3.29-0+deb10u11:10.3.36-0+deb10u2
LowDLA-3134-1tzdata@2021a-0+deb10u12021a-0+deb10u7
LowDLA-3161-1tzdata@2021a-0+deb10u12021a-0+deb10u8
LowDLA-3171-1distro-info-data@0.41+deb10u40.41+deb10u6
LowDLA-3189-1postgresql-11@11.14-0+deb10u111.18-0+deb10u1
LowDLA-3239-2git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u6
LowDLA-3316-1postgresql-11@11.14-0+deb10u111.19-0+deb10u1
LowDLA-3337-1mariadb-10.3@1:10.3.29-0+deb10u11:10.3.38-0+deb10u1
LowDLA-3357-2imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u4
LowDLA-3366-1tzdata@2021a-0+deb10u12021a-0+deb10u10
LowDLA-3411-1distro-info-data@0.41+deb10u40.41+deb10u7
LowDLA-3412-1tzdata@2021a-0+deb10u12021a-0+deb10u11
LowDLA-3482-1debian-archive-keyring@2019.1+deb10u12019.1+deb10u2
LowDLA-3639-1distro-info-data@0.41+deb10u40.41+deb10u8
LowDLA-3684-1tzdata@2021a-0+deb10u12021a-0+deb10u12
LowDLA-3788-1tzdata@2021a-0+deb10u12024a-0+deb10u1
LowDLA-3806-1distro-info-data@0.41+deb10u40.41+deb10u9
LowDSA-5085-2expat@2.2.6-2+deb10u12.2.6-2+deb10u4
LowGHSA-pxg6-pf52-xh8xcookie@0.4.20.7.0
LowGHSA-52f5-9888-hmc6tmp@0.2.10.2.4
LowGHSA-j965-2qgj-vjmqaws-sdk@2.1052.0no fix listed
LowGHSA-vpq2-c234-7xj6@tootallnate/once@1.1.22.0.1
LowGHSA-56x4-j7p9-fcf9moment-timezone@0.5.340.5.35

Used by

1 chart
ChartVersionTagContainers
tooljetkrzwiatrzyk1.1.1v1.18.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.