StackRadar

ghcr.io/jenkins-x/nexus:0.1.37 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/jenkins-x/nexus

ghcr.io/jenkins-x/nexus:0.1.37 resolved to 8caf5289fe73, scanned 14 Sept 2026: 564 findings, 17 critical, 7 on KEV; deployed by 1 chart, among them nexus.

Radar Score

12,8561750264233

564 findings on digest 8caf5289fe73 · scanned 14 Sept 2026

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
0.1.37resolves to8caf5289fe731 chart5 days ago175026423312,856

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

233 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 8caf5289fe73 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowRHSA-2021:4386gcc@8.3.1-5.el80:8.5.0-3.el8
LowRHSA-2025:18286libssh@0.9.0-4.el80:0.9.6-15.el8_10
LowRHSA-2021:2574rpm@4.14.2-37.el80:4.14.3-14.el8_4
LowRHSA-2021:2791rpm@4.14.2-37.el80:4.14.2-38.el8_2
LowRHSA-2026:36728libtasn1@4.13-3.el80:4.13-6.el8_10
LowRHSA-2024:3268krb5@1.17-18.el80:1.18.2-27.el8_10
LowRHSA-2026:42090glib2@2.56.4-8.el80:2.56.4-170.el8_10
LowRHSA-2026:66348vim@2:8.0.1763-13.el82:8.0.1763-31.el8_10.7
LowRHSA-2026:3042openssl@1:1.1.1c-15.el81:1.1.1k-15.el8_6
LowGHSA-xh6m-7cr7-xx66hazelcast@3.10.3no fix listed
LowRHSA-2026:15953glib2@2.56.4-8.el80:2.56.4-169.el8_10
LowRHSA-2023:4529libxml2@2.9.7-7.el80:2.9.7-16.el8_8.1
LowRHSA-2026:38510vim@2:8.0.1763-13.el82:8.0.1763-27.el8_10
LowRHSA-2024:9502expat@2.2.5-3.el80:2.2.5-16.el8_10
LowRHSA-2026:2389brotli@1.0.6-1.el80:1.0.6-4.el8_10
LowGHSA-g8m5-722r-8whqjetty-server@9.4.30.v202006119.4.56
LowRHSA-2023:5728java-1.8.0-openjdk@1:1.8.0.262.b10-0.el8_21:1.8.0.392.b08-2.el8_2
LowRHSA-2023:5731java-1.8.0-openjdk@1:1.8.0.262.b10-0.el8_21:1.8.0.392.b08-4.el8
LowRHSA-2025:10027pam@1.3.1-8.el80:1.3.1-37.el8_10
LowRHSA-2025:14557pam@1.3.1-8.el80:1.3.1-38.el8_10
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.261.31
LowRHSA-2025:23383curl@7.61.1-12.el80:7.61.1-34.el8_10.9
LowRHSA-2024:0119libxml2@2.9.7-7.el80:2.9.7-18.el8_9
LowGHSA-jqm6-m3j3-8gg9elasticsearch@2.4.36.8.2
LowRHSA-2024:4265cups@1:2.2.6-33.el81:2.2.6-60.el8_10
LowRHSA-2023:0205java-1.8.0-openjdk@1:1.8.0.262.b10-0.el8_21:1.8.0.362.b08-1.el8_2
LowRHSA-2023:0208java-1.8.0-openjdk@1:1.8.0.262.b10-0.el8_21:1.8.0.362.b09-2.el8_7
LowRHSA-2022:7715libxml2@2.9.7-7.el80:2.9.7-15.el8
LowRHSA-2025:14135libarchive@3.3.2-8.el8_10:3.3.3-6.el8_10
LowGHSA-mjpc-qx7h-r8c9elasticsearch@2.4.35.6.9
LowGHSA-6xx3-rg99-gc3pbcprov-jdk15to18@1.651.66
LowRHSA-2022:2031libssh@0.9.0-4.el80:0.9.6-3.el8
LowRHSA-2020:4599curl@7.61.1-12.el80:7.61.1-14.el8
LowGHSA-q4rv-gq96-w7c5jetty-server@9.4.30.v202006119.4.57.v20241219
LowRHSA-2026:42877java-1.8.0-openjdk@1:1.8.0.262.b10-0.el8_21:1.8.0.502.b07-1.1.el8
LowRHSA-2026:28553vim@2:8.0.1763-13.el82:8.0.1763-24.el8_10
LowRHSA-2026:2128python3@3.6.8-23.el80:3.6.8-73.el8_10
LowRHSA-2026:5216python3@3.6.8-23.el80:3.6.8-24.el8_2.6
LowRHSA-2026:22721expat@2.2.5-3.el80:2.5.0-2.el8_10
LowRHSA-2025:4051gnutls@3.6.8-11.el8_20:3.6.16-8.el8_10.3
LowRHSA-2025:8686glibc@2.28-101.el80:2.28-251.el8_10.22
LowRHSA-2023:5252dmidecode@1:3.2-5.el81:3.3-4.el8_8.1
LowGHSA-v435-xc8x-wvr9bcprov-jdk15to18@1.651.78
LowRHSA-2022:7514fribidi@1.0.4-8.el80:1.0.4-9.el8
LowRHSA-2022:1961cairo@1.15.12-3.el80:1.15.12-6.el8
LowRHSA-2020:4443libarchive@3.3.2-8.el8_10:3.3.2-9.el8
LowGHSA-rcjj-h6gh-jf3rgroovy-all@2.4.172.4.21
LowGHSA-hr32-mgpm-qf2fresteasy-client@3.12.1.Final3.14.0.Final
LowRHSA-2022:5055cups@1:2.2.6-33.el81:2.2.6-33.el8_2.1
LowRHSA-2024:3203systemd@239-31.el8_2.20:239-82.el8

Used by

1 chart
ChartVersionTagContainers
nexusjenkins-x0.1.370.1.371

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.