twentycrm/twenty:v2.40.0 container image

Docker Hub

Scanned 16 Sept 2026

Deployed by 1 of 17,790 indexed charts (latest versions) at this tag.Docker Hub all tags of twentycrm/twenty

twentycrm/twenty:v2.40.0 resolved to 6e3b2e68ad78, scanned 16 Sept 2026: 70 findings, 0 critical; deployed by 1 chart, among them twenty.

Radar Score

784001060

70 findings on digest 6e3b2e68ad78 · scanned 16 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.40.0resolves to	6e3b2e68ad78	1 chart	today	001060	784

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

60 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 6e3b2e68ad78 as scanned on 16 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-8926	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11352	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82209	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11564	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11586	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80230	curl@8.20.0-r0	8.22.0-r0
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-4w3w-2rp5-g8jm	@xmldom/xmldom@0.8.13	0.8.14
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-w2rr-34g9-rvrj	@xmldom/xmldom@0.8.13	0.8.14
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.13	0.8.15
Low	ALPINE-CVE-2026-9546	curl@8.20.0-r0	8.22.0-r0
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.13	0.8.15
Low	ALPINE-CVE-2026-82208	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-12064	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.20.0-r0	8.22.0-r0
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.3.1	4.3.2
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-8458	curl@8.20.0-r0	8.22.0-r0
Low	GHSA-qfvm-cv95-jqjf	multer@2.2.0	2.3.0
Low	ALPINE-CVE-2026-9547	curl@8.20.0-r0	8.22.0-r0
Low	GHSA-wc9g-mqfw-jrwm	multer@2.2.0	2.3.0
Low	GHSA-535w-7cp7-47q4	multer@2.2.0	2.3.0
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.13	0.8.15
Low	ALPINE-CVE-2026-9080	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.20.0-r0	8.22.0-r0
Low	GHSA-qxc2-j82w-r537	@faker-js/faker@9.8.0	10.5.0
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-337j-9hxr-rhxg	react-router@6.30.6	7.18.0
Low	GHSA-j95f-988m-3j2f	@tiptap/core@3.30.2	3.30.5
Low	GHSA-jxwj-j7wr-gfrw	sanitize-html@2.17.5	2.17.6
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-2x7j-588g-ccc2	nodemailer@9.0.1	9.1.0
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-4mjr-xmp4-gh2g	qs@6.15.2	6.16.0
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-wrjc-x8rr-h8h6	react-router@6.30.6	7.18.0
Low	GHSA-g8qq-57p8-ggw5	sanitize-html@2.17.5	2.17.7
Low	GHSA-cc9r-2j5m-2m83	nodemailer@9.0.1	9.1.0
Low	GHSA-wmmp-3585-3rmp	nodemailer@9.0.1	9.1.0
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0

Used by

1 chart

Chart	Version	Tag	Containers
twentyhelmforgeVerified publisher	1.0.1	v2.40.0	4

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.