quay.io/fiware/tmforum-product-inventory:1.18.0 container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/fiware/tmforum-product-inventory

quay.io/fiware/tmforum-product-inventory:1.18.0 resolved to 3a5d6dd30f1d, scanned 14 Sept 2026: 142 findings, 1 critical; deployed by 1 chart, among them tm-forum-api.

Radar Score

1,8481231108

142 findings on digest 3a5d6dd30f1d · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.18.0resolves to	3a5d6dd30f1d	1 chart	5 days ago	1231108	1,848

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

142 distinct on this digest

Findings for digest 3a5d6dd30f1d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.32	2.0
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	RHSA-2025:21776	expat@2.2.5-17.el8_10	0:2.5.0-1.el8_10
Medium	RHSA-2026:26275	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-16.el8_6
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	PYSEC-2025-49	setuptools@39.2.0	78.1.1
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.91.Final	4.1.118.Final
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.91.Final	4.1.132.Final
Medium	RHSA-2026:20611	gnutls@3.6.16-8.el8_10.3	0:3.6.16-8.el8_10.6
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.91.Final	4.1.94.Final
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.12.0	3.18.0
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.11.0	2.14.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.91.Final	4.1.135.Final
Medium	RHSA-2026:8534	libarchive@3.3.3-5.el8	0:3.3.3-7.el8_10
Medium	RHSA-2025:15702	cups@1:2.2.6-62.el8_10	1:2.2.6-63.el8_10
Medium	RHSA-2026:5588	python3@3.6.8-70.el8_10	0:3.6.8-74.el8_10
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.14.2	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.14.2	2.18.8
Medium	RHSA-2026:9686	java-17-openjdk@1:17.0.16.0.8-2.el8	1:17.0.19.0.10-1.el8
Medium	RHSA-2026:29898	libpng@2:1.6.34-5.el8	2:1.6.34-11.el8_10
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.91.Final	4.1.124.Final
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.14.2	2.15.0
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.91.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.91.Final	4.1.133.Final
Medium	RHSA-2026:26408	rsync@3.1.3-23.el8_10	0:3.1.3-27.el8_10
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.91.Final	4.1.136.Final
Medium	RHSA-2026:26354	libxml2@2.9.7-21.el8_10.1	0:2.9.7-21.el8_10.5
Medium	RHSA-2026:40841	plexus-utils@3.3.0-11.module+el8.10.0+21301+657f54a3	0:3.3.0-11.module+el8.10.0+24366+080b405b.1
Medium	RHSA-2026:41948	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
Medium	RHSA-2026:0927	java-17-openjdk@1:17.0.16.0.8-2.el8	1:17.0.18.0.8-1.el8
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.91.Final	4.1.135.Final
Medium	RHSA-2025:17415	gnutls@3.6.16-8.el8_10.3	0:3.6.16-8.el8_10.4
Medium	RHSA-2026:38503	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6
Low	RHSA-2026:1631	python3@3.6.8-70.el8_10	0:3.6.8-72.el8_10
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.10.5	no fix listed
Low	RHSA-2026:4728	libpng@2:1.6.34-5.el8	2:1.6.34-10.el8_10
Low	GHSA-43w5-mmxv-cpvh	micronaut-json-core@3.9.1	3.10.5
Low	RHSA-2026:7667	nghttp2@1.33.0-6.el8_10.1	0:1.33.0-6.el8_10.2
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.11	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.11	1.2.13
Low	RHSA-2026:11077	python3@3.6.8-70.el8_10	0:3.6.8-76.el8_10
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	RHSA-2025:22063	cups@1:2.2.6-62.el8_10	1:2.2.6-64.el8_10
Low	RHSA-2026:56219	python3@3.6.8-70.el8_10	0:3.6.8-78.el8_10
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.3.0	3.6.1
Low	RHSA-2026:0337	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-14.el8_10
Low	RHSA-2025:14560	python3@3.6.8-70.el8_10	0:3.6.8-71.el8_10
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.91.Final	4.1.132.Final
Low	RHSA-2026:39320	python3@3.6.8-70.el8_10	0:3.6.8-77.el8_10

Used by

1 chart

Chart	Version	Tag	Containers
tm-forum-apifiware	0.17.15	1.18.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.