gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5 container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/spotinst-artifacts/spot-ocean-metric-exporter
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5 resolved to ae57b62291aa, scanned 14 Sept 2026: 110 findings, 0 critical; deployed by 1 chart, among them ocean-metric-exporter.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
110 distinct on this digest
Findings for digest ae57b62291aa as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-42766 | openssl | 3.5.7-r0 |
| Low | GHSA-mgp5-rv84-w37q | tomcat-embed-core | 10.1.52 |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 10.1.55 |
| Low | GHSA-jmp9-x22r-554x | spring-core | 6.2.11 |
| Low | GHSA-rv64-5gf8-9qq8 | tomcat-embed-core | 10.1.54 |
| Low | GHSA-vc5p-v9hr-52mj | log4j-core | 2.25.3 |
| Low | GHSA-x4m4-345f-5h5g | tomcat-embed-core | 10.1.54 |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 10.1.50 |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 10.1.47 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | 6.2.19 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.5.5-r0 |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | 6.2.19 |
| Low | ALPINE-CVE-2026-2673 | openssl | 3.5.6-r0 |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 10.1.53 |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | GHSA-6hg6-v5c8-fphq | log4j-core | 2.25.4 |
| Low | GHSA-72hv-8253-57qq | jackson-core | 2.21.1 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r12 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.5.5-r0 |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.21.4 |
| Low | GHSA-4773-3jfm-qmx3 | spring-webmvc | 6.2.17 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.5.5-r0 |
| Low | GHSA-72pg-x5f8-j25j | spring-webmvc | 6.2.19 |
| Low | GHSA-hjcp-jmpx-g3qm | httpclient5 | 5.6.3 |
| Low | GHSA-mq64-j8f9-9gcj | spring-webmvc | 6.2.19 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.21.4 |
| Low | ALPINE-CVE-2026-42769 | openssl | 3.5.7-r0 |
| Low | GHSA-3chg-m5w7-qfv5 | spring-webmvc | 6.2.19 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.21.4 |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | 6.2.19 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.21.5 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | 6.2.18 |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | 3.5.14 |
| Low | ALPINE-CVE-2026-45446 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-27171 | zlib | 1.3.2-r0 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | 6.2.19 |
| Low | ALPINE-CVE-2025-15469 | openssl | 3.5.5-r0 |
| Low | ALPINE-CVE-2026-42768 | openssl | 3.5.7-r0 |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | 6.2.19 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r11 |
| Low | ALPINE-CVE-2026-22795 | openssl | 3.5.5-r0 |
| Low | ALPINE-CVE-2026-42770 | openssl | 3.5.7-r0 |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 10.1.55 |
| Low | ALPINE-CVE-2025-68160 | openssl | 3.5.5-r0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| ocean-metric-exporterspot | 1.1.1 | 1.0.5 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.