gcr.io/spinnaker-marketplace/halyard:1.32.0 container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/spinnaker-marketplace/halyard
gcr.io/spinnaker-marketplace/halyard:1.32.0 resolved to 0ee5f968d2ab, scanned 14 Sept 2026: 366 findings, 15 critical, 9 on KEV; deployed by 1 chart, among them spinnaker.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
366 distinct on this digest
Findings for digest 0ee5f968d2ab as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-563x-q5rq-57qp | tomcat-embed-core | 9.0.116 |
| Low | GHSA-c43q-5hpj-4crv | jersey-common | 2.34 |
| Low | GHSA-h4h5-3hr4-j3g2 | protobuf-java | 3.16.3 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | GHSA-5jpm-x58v-624v | netty-codec-http | 4.1.108.Final |
| Low | GHSA-6xx3-rg99-gc3p | bcprov-jdk15on | 1.66 |
| Low | GHSA-6xx3-rg99-gc3p | bcprov-ext-jdk15on | 1.66 |
| Low | GHSA-mgvc-8q2h-5pgc | spring-boot-starter-actuator | no fix listed |
| Low | ALPINE-CVE-2020-8284 | curl | 7.79.0-r0 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 9.0.118 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | GHSA-x4m4-345f-5h5g | tomcat-embed-core | 9.0.117 |
| Low | GHSA-gfwj-fwqj-fp3v | spring-web | 5.2.15 |
| Low | GHSA-93wv-jw9v-4972 | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-6jqx-86gh-f27w | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk15on | 1.78 |
| Low | GHSA-jjfh-589g-3hjx | spring-boot-actuator | 2.7.18 |
| Low | GHSA-mvh2-crg5-v77c | netty-codec-http | 4.1.136.Final |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 9.0.113 |
| Low | GHSA-rcjj-h6gh-jf3r | groovy | 2.5.14 |
| Low | GHSA-269q-hmxg-m83q | netty-codec-http | 4.1.77.Final |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 9.0.110 |
| Low | GHSA-558v-64gr-wgg4 | netty-codec | 4.1.136.Final |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | no fix listed |
| Low | GHSA-xwmg-2g98-w7v9 | nimbus-jose-jwt | 9.37.4 |
| Low | GHSA-8xfc-gm6g-vgpv | bcprov-jdk15on | 1.78 |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | no fix listed |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk15on | 1.84 |
| Low | GHSA-4h8f-2wvx-gg5w | bcprov-jdk15on | 1.78 |
| Low | GHSA-42wg-hm62-jcwg | tomcat-embed-core | 9.0.106 |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-jdk15on | no fix listed |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-ext-jdk15on | 1.73 |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | no fix listed |
| Low | ALPINE-CVE-2021-23839 | openssl | 1.1.1j-r0 |
| Low | GHSA-m4p7-r5rc-7g4j | pyasn1 | 0.6.4 |
| Low | GHSA-269g-pwp5-87pp | junit | 4.13.1 |
| Low | GHSA-m8wh-mqgf-rr8g | client-java | 11.0.1 |
| Low | GHSA-8ppf-4f7h-5ppj | pyasn1 | 0.6.4 |
| Low | GHSA-hm4w-wwcw-mr6r | pyasn1 | 0.6.4 |
| Low | ALPINE-CVE-2020-14344 | libx11 | 1.6.10-r0 |
| Low | ALPINE-CVE-2021-22898 | curl | 7.67.0-r4 |
| Low | GHSA-2rmj-mq67-h97g | spring-web | 5.3.38 |
| Low | GHSA-xxqh-mfjm-7mv9 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 9.0.116 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-4cx2-fc23-5wg6 | bcpkix-jdk15on | 1.79 |
| Low | GHSA-hw42-3568-wj87 | google-oauth-client | 1.33.3 |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-jdk15on | no fix listed |