twentycrm/twenty:v2.22.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of twentycrm/twenty

twentycrm/twenty:v2.22.0 resolved to e7d9948bf284, scanned 14 Sept 2026: 150 findings, 0 critical; deployed by 1 chart, among them twenty.

Radar Score

1,6490016134

150 findings on digest e7d9948bf284 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.22.0resolves to	e7d9948bf284	1 chart	5 days ago	0016134	1,649

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

150 distinct on this digest

Findings for digest e7d9948bf284 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-gcfj-64vw-6mp9	axios@1.17.0	1.18.0
Low	ALPINE-CVE-2026-9546	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.6	5.0.8
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	ALPINE-CVE-2026-6464	postgresql18@18.4-r0	18.5-r0
Low	GHSA-4cwx-7wf7-3272	undici@7.28.0	7.29.0
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.16	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@5.0.1	5.0.2
Low	ALPINE-CVE-2026-82208	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14668	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-12064	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	ALPINE-CVE-2026-8932	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.2.0	4.3.2
Low	ALPINE-CVE-2026-14679	postgresql18@18.4-r0	18.5-r0
Low	GHSA-r292-9mhp-454m	tar@7.5.16	7.5.21
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-8458	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-6253	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-qfvm-cv95-jqjf	multer@2.2.0	2.3.0
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-jqh4-m9w3-8hp9	axios@1.17.0	1.18.0
Low	ALPINE-CVE-2026-6276	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-wc9g-mqfw-jrwm	multer@2.2.0	2.3.0
Low	GHSA-hcpx-6fm6-wx23	axios@1.17.0	1.18.0
Low	GHSA-535w-7cp7-47q4	multer@2.2.0	2.3.0
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	ALPINE-CVE-2026-9080	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-5545	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-f4gw-2p7v-4548	axios@1.17.0	1.18.0
Low	GHSA-42h9-826w-cgv3	axios@1.17.0	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.17.0	1.18.0
Low	GHSA-mwf2-3pr3-8698	axios@1.17.0	1.18.0
Low	ALPINE-CVE-2026-6471	postgresql18@18.4-r0	18.5-r0
Low	GHSA-qxc2-j82w-r537	@faker-js/faker@9.8.0	10.5.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-w8wr-v893-vjvp	tar@7.5.16	7.5.18
Low	GHSA-jjmj-jmhj-qwj2	react-router-dom@6.30.4	6.30.6
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-mmx7-hfxf-jppx	axios@1.17.0	1.18.0
Low	GHSA-xj6q-8x83-jv6g	axios@1.17.0	1.18.0

Used by

1 chart

Chart	Version	Tag	Containers
twentytwenty-crm	0.1.11	v2.22.0	3

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.