StackRadar

quay.io/ibmgaragecloud/nodejs:latest container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/ibmgaragecloud/nodejs

quay.io/ibmgaragecloud/nodejs:latest resolved to 01c3b7acb301, scanned 14 Sept 2026: 138 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them setup-job.

Radar Score

2,327055083

138 findings on digest 01c3b7acb301 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
latestresolves to01c3b7acb3011 chart5 days ago0550832,327

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

138 distinct on this digest

Findings for digest 01c3b7acb301 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGHSA-mpwj-fcr6-x34cyarn@1.22.41.22.13
LowDLA-2669-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u5
LowDLA-2694-1tiff@4.0.8-2+deb9u54.0.8-2+deb9u6
LowGHSA-f886-m6hf-6m8vbrace-expansion@1.1.111.1.13
LowGHSA-83g3-92jg-28cxtar@4.4.137.5.8
LowGHSA-w8wr-v893-vjvptar@4.4.137.5.18
LowDLA-2691-1libgcrypt20@1.7.6-2+deb9u31.7.6-2+deb9u4
LowMAL-2022-4933npm-cli-docs@0.1.0no fix listed
LowDLA-2932-1tiff@4.0.8-2+deb9u54.0.8-2+deb9u8
LowDLA-2784-1icu@57.1-6+deb9u457.1-6+deb9u5
LowGHSA-p9pc-299p-vxgpyargs-parser@9.0.213.1.2
LowGHSA-gvwx-54wh-qm9jtar@4.4.137.5.17
LowDLA-2518-1cairo@1.14.8-11.14.8-1+deb9u1
LowDLA-2800-1cups@2.2.1-8+deb9u62.2.1-8+deb9u7
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowGHSA-vmf3-w455-68vhtar@4.4.137.5.16
LowDLA-2898-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u5
LowGHSA-4mjr-xmp4-gh2gqs@6.5.26.16.0
LowDLA-3029-1cups@2.2.1-8+deb9u62.2.1-8+deb9u8
LowDLA-2361-1libx11@2:1.6.4-3+deb9u22:1.6.4-3+deb9u3
LowDLA-2830-1tar@1.29b-1.11.29b-1.1+deb9u1
LowDLA-3063-1systemd@232-25+deb9u12232-25+deb9u14
LowDLA-3047-1avahi@0.6.32-20.6.32-2+deb9u1
LowDLA-2487-1apt@1.4.101.4.11
LowGHSA-6rw7-vpxm-498pqs@6.5.26.14.1
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.111.1.12
LowGHSA-78xj-cgh5-2h22ip@1.1.51.1.9
LowDLA-2424-1tzdata@2020a-0+deb9u12020d-0+deb9u1
LowDLA-2509-1tzdata@2020a-0+deb9u12020e-0+deb9u1
LowDLA-2542-1tzdata@2020a-0+deb9u12021a-0+deb9u1
LowDLA-2593-1ca-certificates@20200601~deb9u120200601~deb9u2
LowDLA-2759-1gnutls28@3.5.8-5+deb9u53.5.8-5+deb9u6
LowDLA-2761-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u5
LowDLA-2797-1tzdata@2020a-0+deb9u12021a-0+deb9u2
LowDLA-2836-2nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u4
LowDLA-2948-1debian-archive-keyring@2017.5+deb9u12017.5+deb9u2
LowDLA-2963-1tzdata@2020a-0+deb9u12021a-0+deb9u3
LowDLA-3051-1tzdata@2020a-0+deb9u12021a-0+deb9u4

Used by

1 chart
ChartVersionTagContainers
setup-jobcloud-native-toolkit0.3.0latest1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.