ghcr.io/melodyyangaws/hive-metastore:3.0.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/melodyyangaws/hive-metastore
ghcr.io/melodyyangaws/hive-metastore:3.0.0 resolved to e949b0f733f0, scanned 14 Sept 2026: 477 findings, 8 critical, 4 on KEV; deployed by 1 chart, among them hive-metastore.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest e949b0f733f0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | DLA-3859-1 | systemd | 247.3-7+deb11u6 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | GHSA-f9xh-2qgp-cq57 | jackson-databind | 2.6.7.5 |
| Medium | DSA-5673-1 | glibc | 2.31-13+deb11u9 |
| Medium | GHSA-m6x4-97wx-4q27 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | GHSA-fqwf-pjwf-7vqv | jackson-databind | 2.6.7.4 |
| Medium | DLA-3898-1 | nghttp2 | 1.43.0-1+deb11u2 |
| Medium | GHSA-3f7h-mf4q-vrm4 | woodstox-core | 5.4.0 |
| Medium | GHSA-qr7j-h6gg-jmgc | jackson-databind | 2.7.9.4 |
| Medium | GHSA-mx7p-6679-8g3q | jackson-databind | 2.6.7.3 |
| Medium | GHSA-r3gr-cxrf-hg25 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-gjmw-vf9h-g25v | jackson-databind | 2.6.7.3 |
| Medium | DSA-5523-1 | curl | 7.74.0-1.3+deb11u10 |
| Medium | GHSA-h3cw-g4mq-c5x2 | jackson-databind | 2.9.10.6 |
| Medium | DSA-5417-1 | openssl | 1.1.1n-0+deb11u5 |
| Medium | GHSA-85cw-hj65-qqv9 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-fmmc-742q-jg75 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-gwp4-hfv6-p7hw | jackson-databind | 2.6.7.3 |
| Medium | GHSA-j823-4qch-3rgm | jackson-databind | 2.9.10.5 |
| Medium | GHSA-f3j5-rmmp-3fc5 | jackson-databind | 2.8.11.5 |
| Medium | GHSA-5p34-5m6p-p58g | jackson-databind | 2.9.10.4 |
| Medium | GHSA-c265-37vj-cwcc | jackson-databind | 2.9.10.5 |
| Medium | GHSA-9vvp-fxw6-jcxr | jackson-databind | 2.9.10.4 |
| Medium | GHSA-wh8g-3j2c-rqj5 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-gx2c-fvhc-ph4j | hadoop-common | 3.3.3 |
| Medium | GHSA-5949-rw7g-wx7w | jackson-databind | 2.6.7.5 |
| Medium | GHSA-8wm5-8h9c-47pc | hadoop-common | 3.3.3 |
| Medium | GHSA-qjw2-hr98-qgfh | jackson-databind | 2.6.7.5 |
| Medium | GHSA-wm47-8v5p-wjpj | netty | no fix listed |
| Medium | GHSA-rj7p-rfgp-852x | libthrift | 0.13.0 |
| Medium | DSA-5343-1 | openssl | 1.1.1n-0+deb11u4 |
| Medium | GHSA-6wqp-v4v6-c87c | jackson-databind | 2.9.6 |
| Medium | GHSA-w3f4-3q6j-rh82 | jackson-databind | 2.7.9.5 |
| Medium | GHSA-p979-4mfw-53vg | netty | no fix listed |
| Medium | DLA-3942-1 | openssl | 1.1.1n-0+deb11u6 |
| Medium | DLA-3942-2 | openssl | 1.1.1w-0+deb11u2 |
| Medium | GHSA-wjxj-f8rg-99wx | libthrift | 0.9.3-1 |
| Medium | GHSA-83g2-8m93-v3w7 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 |
| Medium | GHSA-cjjf-94ff-43w7 | jackson-databind | 2.7.9.4 |
| Medium | GHSA-h4rc-386g-6m85 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-r7pg-v2c8-mfg3 | avro | 1.11.4 |
| Medium | GHSA-g2fg-mr77-6vrm | libthrift | 0.14.0 |
| Medium | GHSA-9vjp-v76f-g363 | netty | no fix listed |
| Medium | GHSA-9vjp-v76f-g363 | netty-codec | 4.1.68.Final |
| Medium | GHSA-8w26-6f25-cm9x | jackson-databind | 2.9.10.8 |
| Medium | GHSA-v585-23hc-c647 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-r695-7vr9-jgc2 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-8c4j-34r4-xr8g | jackson-databind | 2.6.7.5 |
| Medium | GHSA-89qr-369f-5m5x | jackson-databind | 2.6.7.5 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| hive-metastoreolehrgfVerified publisher | 0.1.0 | 3.0.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.