StackRadar

quay.io/ibmgaragecloud/nodejs:latest container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/ibmgaragecloud/nodejs

quay.io/ibmgaragecloud/nodejs:latest resolved to 01c3b7acb301, scanned 14 Sept 2026: 138 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them setup-job.

Radar Score

2,327055083

138 findings on digest 01c3b7acb301 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to01c3b7acb3011 chart5 days ago0550832,327

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

138 distinct on this digest

Findings for digest 01c3b7acb301 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighGHSA-c4w7-xm78-47vhy18n@4.0.04.0.1
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
HighDLA-2415-1KEVfreetype@2.6.3-3.2+deb9u12.6.3-3.2+deb9u2
HighDLA-2534-1KEVsudo@1.8.19p1-2.1+deb9u21.8.19p1-2.1+deb9u3
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumDLA-2544-1openldap@2.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u7
MediumDLA-3008-1openssl@1.1.0l-1~deb9u11.1.0l-1~deb9u6
MediumDLA-2952-1openssl@1.1.0l-1~deb9u11.1.0l-1~deb9u5
MediumDLA-2953-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u7
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-r628-mhmh-qjhwtar@4.4.134.4.15
MediumDLA-3017-1openldap@2.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u9
MediumDLA-2574-1openldap@2.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u8
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumDLA-2968-1zlib@1:1.2.8.dfsg-51:1.2.8.dfsg-5+deb9u1
MediumDLA-2563-1openssl@1.1.0l-1~deb9u11.1.0l-1~deb9u3
MediumDLA-2565-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u4
MediumDLA-2766-1openssl@1.1.0l-1~deb9u11.1.0l-1~deb9u4
MediumDLA-2774-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u6
MediumDLA-2388-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u2
MediumDLA-2935-1expat@2.2.0-2+deb9u32.2.0-2+deb9u5
MediumGHSA-vx3p-948g-6vhqssri@6.0.16.0.2
MediumGHSA-9r2w-394v-53qctar@4.4.134.4.16
MediumGHSA-93q8-gq69-wqmwansi-regex@3.0.03.0.1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.22.5.4
MediumGHSA-pw54-mh39-w3hcnpm-user-validate@1.0.01.0.1
MediumGHSA-qqgx-2p2h-9c37ini@1.3.51.3.6
MediumGHSA-ff7x-qrg7-qggmdot-prop@4.2.04.2.1
MediumGHSA-c2qf-rxjj-qqgwsemver@5.7.15.7.2
MediumDLA-2836-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u3
MediumGHSA-qq89-hq3f-393ptar@4.4.134.4.18
MediumGHSA-f8q6-p94x-37v3minimatch@3.0.43.0.5
MediumDLA-2848-1libssh2@1.7.0-1+deb9u11.7.0-1+deb9u2
MediumGHSA-72xf-g2v4-qvf3tough-cookie@2.4.34.1.3
MediumGHSA-5955-9wpr-37jhtar@4.4.134.4.18
MediumDLA-2786-1nghttp2@1.18.1-1+deb9u11.18.1-1+deb9u2
MediumDLA-2666-1libx11@2:1.6.4-3+deb9u22:1.6.4-3+deb9u4
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@3.8.14.1.1
MediumDLA-2340-1sqlite3@3.16.2-5+deb9u13.16.2-5+deb9u2
MediumDLA-2500-1curl@7.52.1-5+deb9u117.52.1-5+deb9u13
MediumDLA-2715-1systemd@232-25+deb9u12232-25+deb9u13
MediumGHSA-43f8-2h32-f4cjhosted-git-info@2.8.82.8.9
MediumDLA-2653-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u4
MediumDLA-2369-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u3
MediumDLA-2492-1openssl@1.1.0l-1~deb9u11.1.0l-1~deb9u2
MediumDLA-2493-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u3
MediumGHSA-v88g-cgmw-v5xwajv@5.5.26.12.3
MediumDLA-2734-1curl@7.52.1-5+deb9u117.52.1-5+deb9u15

Used by

1 chart
ChartVersionTagContainers
setup-jobcloud-native-toolkit0.3.0latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.