wso2/wso2am:2.6.0 container image
Docker HubScanned 22 Sept 2026
Deployed by 1 of 17,828 indexed charts (latest versions) at this tag.Docker Hub all tags of wso2/wso2am
wso2/wso2am:2.6.0 resolved to fbe0f4059b74, scanned 22 Sept 2026: 820 findings, 19 critical, 3 on KEV; deployed by 1 chart, among them am-pattern-1.
Radar Score
820 findings on digest fbe0f4059b74 · scanned 22 Sept 2026
KEV ×3 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest fbe0f4059b74 as scanned on 22 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 22 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-83r6-96m8-r52p | cxf-rt-rs-security-oauth2 | 4.1.7 |
| Low | UBUNTU-CVE-2026-5545 | curl | 7.68.0-1ubuntu2.25+esm5 |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-3784 | curl | 7.68.0-1ubuntu2.25+esm3 |
| Low | UBUNTU-CVE-2023-28322 | curl | 7.68.0-1ubuntu2.19 |
| Low | GHSA-775g-4xr8-78h8 | spring-expression | no fix listed |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.6.13-2ubuntu1.12+esm3 |
| Low | UBUNTU-CVE-2024-28834 | gnutls28 | 3.6.13-2ubuntu1.11 |
| Low | GHSA-x83m-pf6f-pf9g | hibernate-validator | 6.2.0.Final |
| Low | UBUNTU-CVE-2021-3996 | util-linux | 2.34-0.1ubuntu9.3 |
| Low | UBUNTU-CVE-2021-3995 | util-linux | 2.34-0.1ubuntu9.3 |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | UBUNTU-CVE-2025-40909 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-8458 | curl | 7.68.0-1ubuntu2.25+esm4 |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-xf62-wr5p-5p95 | cxf-rt-rs-security-oauth2 | 4.1.7 |
| Low | UBUNTU-CVE-2025-14524 | curl | no fix listed |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Low | UBUNTU-CVE-2026-6238 | glibc | no fix listed |
| Low | GHSA-542g-m3fx-q86f | cxf-rt-rs-security-oauth2 | 4.1.7 |
| Low | UBUNTU-CVE-2021-20223 | sqlite3 | 3.31.1-4ubuntu0.4 |
| Low | UBUNTU-CVE-2026-3731 | libssh | 0.9.3-2ubuntu2.5+esm4 |
| Low | UBUNTU-CVE-2025-65018 | libpng1.6 | 1.6.37-2ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-5435 | glibc | no fix listed |
| Low | GHSA-4gc7-5j7h-4qph | spring-context | no fix listed |
| Low | GHSA-4gc7-5j7h-4qph | spring-web | no fix listed |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | GHSA-84h7-rjj3-6jx4 | netty-codec-http | 4.1.129.Final |
| Low | UBUNTU-CVE-2025-0395 | glibc | 2.31-0ubuntu9.17 |
| Low | UBUNTU-CVE-2026-77117 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-80489 | glibc | no fix listed |
| Low | UBUNTU-CVE-2023-4039 | gcc-10 | 10.5.0-1ubuntu1~20.04.1+esm1 |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-11822 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-11824 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2025-4598 | systemd | 245.4-4ubuntu3.24+esm1 |
| Low | UBUNTU-CVE-2024-28085 | util-linux | 2.34-0.1ubuntu9.6 |
| Low | UBUNTU-CVE-2025-15079 | curl | 7.68.0-1ubuntu2.25+esm2 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2026-6429 | curl | no fix listed |
| Low | UBUNTU-CVE-2024-22365 | pam | 1.3.1-5ubuntu4.7 |
| Low | UBUNTU-CVE-2026-86140 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm5 |
| Low | GHSA-xpxp-r8hf-wgf6 | org.wso2.carbon.identity.user.store.configuration.ui | 7.5.12 |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2021-24031 | libzstd | 1.4.4+dfsg-3ubuntu0.1 |
| Low | UBUNTU-CVE-2026-1965 | curl | 7.68.0-1ubuntu2.25+esm3 |
| Low | UBUNTU-CVE-2025-3576 | krb5 | 1.17-6ubuntu4.11 |
| Low | UBUNTU-CVE-2020-27350 | apt | 2.0.2ubuntu0.2 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| am-pattern-1wso2 | 2.6.0-7 | 2.6.0 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.