ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/stacksimplify/kube-usermgmt-webapp

ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb resolved to 41b45003c6b6, scanned 14 Sept 2026: 222 findings, 10 critical, 6 on KEV; deployed by 1 chart, among them umsapp.

Radar Score

6,101103111962

222 findings on digest 41b45003c6b6 · scanned 14 Sept 2026

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.0.0-mysqldbresolves to	41b45003c6b6	1 chart	6 days ago	103111962	6,101

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

222 distinct on this digest

Findings for digest 41b45003c6b6 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@9.0.21	9.0.121
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.9.9	2.15.0
Medium	GHSA-2ppp-9496-p23q	spring-security-core@5.1.5.RELEASE	5.1.10
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.23	1.32
Medium	GHSA-hh3j-x4mc-g48r	tomcat-embed-core@9.0.21	9.0.29
Medium	GHSA-xf96-w227-r7c4	spring-boot-autoconfigure@2.1.6.RELEASE	2.5.15
Medium	GHSA-mf92-479x-3373	spring-security-web@5.1.5.RELEASE	no fix listed
Medium	ALPINE-CVE-2018-5407	openssl@1.0.2o-r0	1.0.2q-r0
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@9.0.21	9.0.118
Medium	GHSA-rmrm-75hp-phr2	hibernate-validator@6.0.17.Final	6.0.20.Final
Low	ALPINE-CVE-2018-1000654	libtasn1@4.12-r2	4.12-r4
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.21	9.0.81
Low	GHSA-7v6m-28jr-rg84	hibernate-validator@6.0.17.Final	6.2.0.CR1
Low	GHSA-cm59-pr5q-cw85	spring-boot@2.1.6.RELEASE	2.2.11.RELEASE
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.1.8.RELEASE	5.2.23.RELEASE
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@9.0.21	9.0.118
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@9.0.21	9.0.106
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@9.0.21	9.0.116
Low	GHSA-563x-q5rq-57qp	tomcat-coyote@8.0.51	9.0.116
Low	ALPINE-CVE-2018-20217	krb5@1.15.2-r1	1.15.4-r0
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.23	1.31
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.21	9.0.118
Low	ALPINE-CVE-2019-1563	openssl@1.0.2o-r0	1.0.2t-r0
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.21	9.0.117
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.21	9.0.113
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.21	9.0.110
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-qq5r-98hh-rxc9	tomcat-coyote@8.0.51	9.0.113
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.1.6.RELEASE	no fix listed
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@2.1.9.RELEASE	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.1.8.RELEASE	no fix listed
Low	GHSA-2rmj-mq67-h97g	spring-web@5.1.8.RELEASE	5.3.38
Low	ALPINE-CVE-2019-1547	openssl@1.0.2o-r0	1.0.2t-r0
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.21	9.0.116
Low	GHSA-775g-4xr8-78h8	spring-expression@5.1.8.RELEASE	no fix listed
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.17.Final	6.2.0.Final
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	ALPINE-CVE-2018-0495	libressl@2.6.3-r0	2.6.5-r0
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.1.8.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.1.8.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-5m4m-73w9-8433	spring-data-commons@2.1.9.RELEASE	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.9.9	2.18.8
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@2.1.9.RELEASE	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.9.9	2.18.8

Used by

1 chart

Chart	Version	Tag	Containers
umsappstacksimplifyVerified publisher	1.0.0	1.0.0-mysqldb	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.