gcr.io/spinnaker-marketplace/halyard:1.32.0 container image

Google Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/spinnaker-marketplace/halyard

gcr.io/spinnaker-marketplace/halyard:1.32.0 resolved to 0ee5f968d2ab, scanned 14 Sept 2026: 366 findings, 15 critical, 9 on KEV; deployed by 1 chart, among them spinnaker.

Radar Score

8,7521539174138

366 findings on digest 0ee5f968d2ab · scanned 14 Sept 2026

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.32.0resolves to	0ee5f968d2ab	1 chart	8 days ago	1539174138	8,752

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

366 distinct on this digest

Findings for digest 0ee5f968d2ab as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.30	9.0.107
Medium	GHSA-hh26-6xwr-ggv7	spring-beans@5.2.3.RELEASE	5.2.22.RELEASE
Medium	GHSA-48rw-j489-928m	spring-security-core@5.2.1.RELEASE	5.2.4
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.30	9.0.107
Medium	ALPINE-CVE-2019-18348	python2@2.7.16-r3	2.7.18-r0
Medium	GHSA-3qwq-q9vm-5j42	spring-cloud-config-server@2.1.3.RELEASE	no fix listed
Medium	GHSA-c28r-hw5m-5gv3	aws-java-sdk-s3@1.11.723	1.12.261
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.45.Final	4.1.132.Final
Medium	GHSA-wx5j-54mm-rqqq	netty-codec-http@4.1.45.Final	4.1.71.Final
Medium	ALPINE-CVE-2021-22925	curl@7.67.0-r0	7.67.0-r5
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.30	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.30	9.0.121
Medium	GHSA-wrvw-hg22-4m67	protobuf-java@3.9.1	3.16.1
Medium	GHSA-9w3m-gqgf-c4p9	snakeyaml@1.25	1.32
Medium	GHSA-x27m-9w8j-5vcw	jettison@1.3.7	1.5.2
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.45.Final	4.1.94.Final
Medium	GHSA-p22x-g9px-3945	tomcat-embed-core@9.0.30	9.0.68
Medium	GHSA-pvp8-3xj6-8c6x	commons-configuration@1.8	no fix listed
Medium	GHSA-f263-c949-w85g	google-oauth-client@1.30.2	1.31.0
Medium	PYSEC-2023-192	urllib3@1.25.8	2.0.6
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@5.2.3.RELEASE	5.3.34
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.9	3.18.0
Medium	GHSA-j288-q9x7-2f5v	commons-lang@2.6	no fix listed
Medium	GHSA-wqvq-5m8c-6g24	urllib3@1.25.8	1.25.9
Medium	ALPINE-CVE-2021-22947	curl@7.67.0-r0	7.79.0-r0
Medium	GHSA-v528-7hrm-frqp	json-smart@2.3	2.3.1
Medium	ALPINE-CVE-2020-8177	curl@7.67.0-r0	7.67.0-r1
Medium	GHSA-537h-rv9q-vvph	rsa@3.4.2	4.1
Medium	GHSA-7rf3-mqpx-h7xg	jettison@1.3.7	1.5.2
Medium	GHSA-grr4-wv38-f68w	jettison@1.3.7	1.5.2
Medium	GHSA-v682-8vv8-vpwr	tomcat-embed-websocket@9.0.30	9.0.86
Medium	GHSA-g6ph-x5wf-g337	plexus-utils@3.0.22	3.0.24
Medium	GHSA-c4r9-r8fh-9vj2	snakeyaml@1.25	1.31
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.6	2.14.0
Medium	GHSA-6g23-24mc-hx6x	spring-cloud-config-server@2.1.3.RELEASE	no fix listed
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.45.Final	4.1.135.Final
Medium	GHSA-jwh2-ffg4-48xc	kubernetes-client@4.6.0	4.7.2
Medium	GHSA-f3jh-qvm4-mg39	spring-security-core@5.2.1.RELEASE	5.7.12
Medium	GHSA-98wm-3w3q-mw94	snakeyaml@1.25	1.31
Medium	GHSA-cj8j-37rh-8475	bcpg-jdk15on@1.61	no fix listed
Medium	GHSA-48rh-qgjr-xfj6	jsoup@1.8.1	1.8.3
Medium	GHSA-2hjr-fg6c-v2h6	jinjava@2.2.3	2.5.4
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.25.8	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.25.8	2.6.0
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@9.0.30	9.0.121
Medium	GHSA-3x8x-79m2-3w2w	jackson-databind@2.10.2	2.12.6
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.10.2	2.18.8
Medium	GHSA-wxqc-pxw9-g2p8	spring-expression@5.2.3.RELEASE	5.2.24.RELEASE
Medium	GHSA-493p-pfq6-5258	json-smart@2.3	2.4.9
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.10.2	2.18.8

Used by

1 chart

Chart	Version	Tag	Containers
spinnakerdwardu-helm-charts	2.2.6	1.32.0	4

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.