StackRadar

quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1 container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/opsmxpublic/spin-sample-pipeline

quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1 resolved to c6a934439421, scanned 14 Sept 2026: 1,315 findings, 17 critical, 6 on KEV; deployed by 1 chart, among them oes.

Radar Score

20,6031736433828

1,315 findings on digest c6a934439421 · scanned 14 Sept 2026

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.0.1resolves toc6a9344394211 chart8 days ago173643382820,603

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

High findings

36 distinct on this digest

High: findings whose contribution to the Radar Score is 40–69. Show every band

Findings for digest c6a934439421 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
HighUBUNTU-CVE-2022-34169openjdk-8@8u222-b10-1ubuntu1~16.04.18u342-b07-0ubuntu1~16.04
HighUBUNTU-CVE-2022-25236expat@2.1.0-7ubuntu0.16.04.42.1.0-7ubuntu0.16.04.5+esm2
HighUBUNTU-CVE-2022-0778openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm2
HighUBUNTU-CVE-2023-0286openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm6
HighUBUNTU-CVE-2024-2398curl@7.47.0-1ubuntu2.187.47.0-1ubuntu2.19+esm12
HighUBUNTU-CVE-2023-25652git@1:2.7.4-0ubuntu1.101:2.7.4-0ubuntu1.10+esm7
HighUBUNTU-CVE-2018-25032rsync@3.1.1-3ubuntu1.33.1.1-3ubuntu1.3+esm1
HighUBUNTU-CVE-2018-25032zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3+esm1
HighUBUNTU-CVE-2021-23840openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.19
HighUBUNTU-CVE-2023-2650openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm9
HighUBUNTU-CVE-2021-3712openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm1
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.0.0-20191011191535-87dc89f015500.0.0-20231218163308-9d2ee975ef9f
HighUBUNTU-CVE-2023-48795openssh@1:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm5
HighUBUNTU-CVE-2022-37434zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3+esm2
HighUBUNTU-CVE-2022-37434rsync@3.1.1-3ubuntu1.33.1.1-3ubuntu1.3+esm2
HighUBUNTU-CVE-2021-43527nss@2:3.28.4-0ubuntu0.16.04.62:3.28.4-0ubuntu0.16.04.14+esm2
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.0.0-20200226121028-0de0cce0169b0.17.0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.0.0-20200226121028-0de0cce0169b0.23.0
HighUBUNTU-CVE-2016-2775bind9@1:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.19+esm5
HighUBUNTU-CVE-2016-8858openssh@1:7.2p2-4ubuntu2.10no fix listed
HighUBUNTU-CVE-2019-6111openssh@1:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.fips.2.8.1
HighUBUNTU-CVE-2016-6170bind9@1:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.19+esm5
HighUBUNTU-CVE-2024-2511openssl@1.0.2g-1ubuntu4.151.0.2g-1ubuntu4.20+esm18
HighUBUNTU-CVE-2024-3596krb5@1.13.2+dfsg-5ubuntu2.11.13.2+dfsg-5ubuntu2.2+esm6
HighUBUNTU-CVE-2021-31535libx11@2:1.6.3-1ubuntu2.12:1.6.3-1ubuntu2.2+esm1
HighUBUNTU-CVE-2019-19012libonig@5.9.6-1ubuntu0.15.9.6-1ubuntu0.1+esm2
HighUBUNTU-CVE-2022-40303libxml2@2.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.7+esm4
HighUBUNTU-CVE-2022-35737sqlite3@3.11.0-1ubuntu1.23.11.0-1ubuntu1.5+esm2
HighGHSA-ffhg-7mh4-33c4golang.org/x/crypto@v0.0.0-20191011191535-87dc89f015500.0.0-20200220183623-bac4c82f6975
HighUBUNTU-CVE-2017-15088krb5@1.13.2+dfsg-5ubuntu2.11.13.2+dfsg-5ubuntu2.2+esm3
HighUBUNTU-CVE-2019-3462apt@1.2.271.2.29ubuntu0.1
HighUBUNTU-CVE-2019-12900bzip2@1.0.6-81.0.6-8ubuntu0.1
HighUBUNTU-CVE-2016-9841zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3
HighUBUNTU-CVE-2018-11236glibc@2.23-0ubuntu102.23-0ubuntu11.2
HighUBUNTU-CVE-2019-6110openssh@1:7.2p2-4ubuntu2.10no fix listed
HighGO-2022-0535KEVstdlib@go1.13.11.12.16

Used by

1 chart
ChartVersionTagContainers
oesopsmxVerified publisher4.0.32v1.0.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.