ghcr.io/melodyyangaws/hive-metastore:3.0.0 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/melodyyangaws/hive-metastore
ghcr.io/melodyyangaws/hive-metastore:3.0.0 resolved to e949b0f733f0, scanned 14 Sept 2026: 477 findings, 8 critical, 4 on KEV; deployed by 1 chart, among them hive-metastore.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
154 distinct on this digest
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest e949b0f733f0 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-cvm9-fjm9-3572 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-vfqx-33qm-g869 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-9m6f-7xcq-8vf8 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-58pp-9c76-5625 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-grg4-wf29-r9vv | netty | no fix listed |
| Medium | GHSA-grg4-wf29-r9vv | netty-codec | 4.1.68.Final |
| Medium | GHSA-rf6r-2c4q-2vwg | jackson-databind | 2.9.10.4 |
| Medium | GHSA-v3xw-c963-f5hc | jackson-databind | 2.9.10.4 |
| Medium | GHSA-758m-v56v-grj4 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-mc6h-4qgp-37qh | jackson-databind | 2.9.10.5 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | GHSA-cf6r-3wgc-h863 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-c2q3-4qrh-fm48 | jackson-databind | 2.9.10.5 |
| Medium | GHSA-p2v9-g2qv-p635 | netty | no fix listed |
| Medium | GHSA-cmfg-87vq-g5g4 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-95cm-88f5-f2c7 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-27xj-rqx5-2255 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | GHSA-rpr3-cw39-3pxh | jackson-databind | 2.9.10.4 |
| Medium | GHSA-qmqc-x3r4-6v39 | jackson-databind | 2.9.10 |
| Medium | GHSA-hp87-p4gw-j4gq | gopkg.in/ | 3.0.1 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | GHSA-449p-3h89-pw88 | gopkg.in/ | no fix listed |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | GHSA-vx85-mj8c-4qm6 | libthrift | 0.12.0 |
| Medium | GHSA-7286-pgfv-vxvh | zookeeper | 3.7.2 |
| Medium | GHSA-wxr5-93ph-8wr9 | commons-beanutils | 1.11.0 |
| Medium | GHSA-v725-9546-7q7m | gopkg.in/ | no fix listed |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | DSA-5218-1 | zlib | 1:1.2.11.dfsg-2+deb11u2 |
| Medium | GHSA-cjjc-xp8v-855w | golang.org/ | 0.0.0-20200124225646-8b5121be2f68 |
| Medium | GHSA-mvr2-9pj6-7w5j | guava | 24.1.1-android |
| Medium | GHSA-f256-j965-7f32 | netty | no fix listed |
| Medium | GHSA-fg2v-w576-w4v3 | json-smart | 1.3.3 |
| Medium | GHSA-xrjj-mj9h-534m | golang.org/ | 0.4.0 |
| Medium | GHSA-vp98-w2p3-mv35 | log4j | 2.0 |
| Medium | GHSA-5rcv-m4m3-hfh7 | golang.org/ | 0.3.3 |
| Medium | GHSA-h86h-8ppg-mxmh | golang.org/ | 0.0.0-20210428140749-89ef3d95e781 |
| Medium | GHSA-c28r-hw5m-5gv3 | aws-java-sdk-s3 | 1.12.261 |
| Medium | GHSA-rhrv-645h-fjfh | avro | 1.11.3 |
| Medium | GHSA-qcwq-55hx-v3vh | snappy-java | 1.1.10.1 |
| Medium | GHSA-wx5j-54mm-rqqq | netty | no fix listed |
| Medium | GHSA-wx5j-54mm-rqqq | netty-codec-http | 4.1.71.Final |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| hive-metastoreolehrgfVerified publisher | 0.1.0 | 3.0.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.