xetusoss/archiva:v2.2.5 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of xetusoss/archiva

xetusoss/archiva:v2.2.5 resolved to 88f25242b9ee, scanned 14 Sept 2026: 232 findings, 12 critical, 4 on KEV; deployed by 1 chart, among them archiva.

Radar Score

6,907123713845

232 findings on digest 88f25242b9ee · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.2.5resolves to	88f25242b9ee	1 chart	6 days ago	123713845	6,907

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

232 distinct on this digest

Findings for digest 88f25242b9ee as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.8.2	2.12.2
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.2.1.RELEASE	5.2.20.RELEASE
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
Critical	GHSA-fjq5-5j5f-mvxh	commons-collections@3.2.1	3.2.2
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.8.2	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.8.2	2.12.3
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.11	2.0
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.3.0	2.7.9.2
Critical	ALPINE-CVE-2019-8457	sqlite@3.26.0-r3	3.28.0-r0
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.8.3	1.9.4
Critical	GHSA-8ffc-79xg-29w8	cassandra-all@2.0.9	3.0.26
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.3.0	2.6.7.1
High	GHSA-9339-86wc-4qgf	xalan@2.7.1	2.7.3
High	GHSA-ghgj-3xqr-6jfm	jetty-server@8.1.7.v20120910	9.2.9.v20150224
High	GHSA-4wrc-f8pq-fpqp	spring-web@4.2.1.RELEASE	6.0.0
High	GHSA-8489-44mv-ggj8	log4j-core@2.8.2	2.12.4
High	GHSA-4w82-r329-3q67	jackson-databind@2.3.0	2.6.7.4
High	GHSA-26vr-8j45-3r4w	jetty-server@8.1.7.v20120910	9.4.39
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.3.0	2.6.7.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@8.1.7.v20120910	9.2.25.v20180606
High	GHSA-q93h-jc49-78gg	jackson-databind@2.3.0	2.7.9.7
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.3.0	2.7.9.7
High	GHSA-59j4-wjwp-mw9m	velocity@1.7	no fix listed
High	GHSA-9qcf-c26r-x5rf	quartz@2.2.1	2.3.2
High	GHSA-vgg8-72f2-qm23	jetty-server@8.1.7.v20120910	9.2.25.v20180606
High	GHSA-w77p-8cfg-2x43	slf4j-ext@1.7.25	1.7.26
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	GHSA-645p-88qh-w398	jackson-databind@2.3.0	2.6.7.3
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.8.3	1.9.4
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.11	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.3.0	2.6.7.5
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.3.0	2.6.7.3
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.3.0	2.6.7.3
High	GHSA-558x-2xjg-6232	spring-expression@4.2.1.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.3.0	2.6.7.3
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.3.0	2.6.7.3
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.3.0	2.7.9.5
High	GHSA-2363-cqg2-863c	jdom@1.0	no fix listed
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.3.0	2.6.7.4
High	GHSA-h592-38cm-4ggp	jackson-databind@2.3.0	2.6.7.3
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.3.0	2.7.9.6
High	GHSA-6hgm-866r-3cjv	commons-collections@3.2.1	3.2.2
High	GHSA-j8g6-2wh7-6439	tika-core@1.3	1.14
High	ALPINE-CVE-2019-12900	bzip2@1.0.6-r6	1.0.6-r7
High	GHSA-g8hw-794c-4j9g	spring-core@4.2.1.RELEASE	4.3.15
High	GHSA-hwj3-m3p6-hj38	dom4j@1.6.1	2.0.3
High	GHSA-cqqj-4p63-rrmm	netty@3.6.6.Final	no fix listed
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.3.0	2.9.10.8
Medium	GHSA-8vhq-qq4p-grq3	plexus-utils@3.0.15	3.0.16

Used by

1 chart

Chart	Version	Tag	Containers
archivaslamdev	0.0.7	v2.2.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.