twentycrm/twenty:v2.22.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of twentycrm/twenty
twentycrm/twenty:v2.22.0 resolved to e7d9948bf284, scanned 14 Sept 2026: 150 findings, 0 critical; deployed by 1 chart, among them twenty.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
134 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest e7d9948bf284 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-8286 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 4.3.2 |
| Low | ALPINE-CVE-2026-14679 | postgresql18 | 18.5-r0 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | ALPINE-CVE-2026-40164 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-39979 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-8458 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-6253 | curl | 8.20.0-r0 |
| Low | GHSA-qfvm-cv95-jqjf | multer | 2.3.0 |
| Low | GHSA-4xrf-jv44-h6hh | ip-address | 10.2.2 |
| Low | ALPINE-CVE-2026-9547 | curl | 8.22.0-r0 |
| Low | GHSA-jqh4-m9w3-8hp9 | axios | 1.18.0 |
| Low | ALPINE-CVE-2026-6276 | curl | 8.20.0-r0 |
| Low | GHSA-wc9g-mqfw-jrwm | multer | 2.3.0 |
| Low | GHSA-hcpx-6fm6-wx23 | axios | 1.18.0 |
| Low | GHSA-535w-7cp7-47q4 | multer | 2.3.0 |
| Low | GHSA-6h8r-xr42-gp59 | @xmldom/ | 0.8.15 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | ALPINE-CVE-2026-9080 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-5545 | curl | 8.20.0-r0 |
| Low | ALPINE-CVE-2026-9545 | curl | 8.22.0-r0 |
| Low | GHSA-f4gw-2p7v-4548 | axios | 1.18.0 |
| Low | GHSA-42h9-826w-cgv3 | axios | 1.18.0 |
| Low | GHSA-pmv8-rq9r-6j72 | axios | 1.18.0 |
| Low | GHSA-mwf2-3pr3-8698 | axios | 1.18.0 |
| Low | ALPINE-CVE-2026-6471 | postgresql18 | 18.5-r0 |
| Low | GHSA-qxc2-j82w-r537 | @faker-js/ | 10.5.0 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-jjmj-jmhj-qwj2 | react-router-dom | 6.30.6 |
| Low | GHSA-6gmq-8vp8-gcm6 | @xmldom/ | 0.8.15 |
| Low | GHSA-mmx7-hfxf-jppx | axios | 1.18.0 |
| Low | GHSA-xj6q-8x83-jv6g | axios | 1.18.0 |
| Low | ALPINE-CVE-2026-6429 | curl | 8.20.0-r0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | ALPINE-CVE-2026-7168 | curl | 8.20.0-r0 |
| Low | GHSA-337j-9hxr-rhxg | react-router | 7.18.0 |
| Low | ALPINE-CVE-2026-4873 | curl | 8.20.0-r0 |
| Low | GHSA-j95f-988m-3j2f | @tiptap/ | 3.30.5 |
| Low | GHSA-jr45-8vmc-qm54 | undici | 7.29.0 |
| Low | GHSA-7q8q-rj6j-mhjq | axios | 1.18.0 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 5.0.7 |
| Low | ALPINE-CVE-2026-49839 | jq | 1.8.2-r0 |
| Low | GHSA-866g-f22w-33x8 | @ai-sdk/ | 4.0.33 |
| Low | GHSA-2rp8-mm9q-fp49 | typeorm | 0.3.31 |
| Low | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Low | GHSA-5p4m-2wfm-xmqj | js-yaml | 4.3.1 |
| Low | ALPINE-CVE-2026-7009 | curl | 8.20.0-r0 |
| Low | GHSA-55q2-fjhq-7xh7 | dompurify | 3.4.13 |