StackRadar

quay.io/prometheus/prometheus:v3.14.0 container image

Quay.io

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/prometheus/prometheus

quay.io/prometheus/prometheus:v3.14.0 resolved to 5ce7540c3c00, scanned 14 Sept 2026: 12 findings, 0 critical; deployed by 2 charts, among them prometheus and prometheus.

Radar Score

9500111

12 findings on digest 5ce7540c3c00 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v3.14.0resolves to5ce7540c3c002 chartsyesterday0011195

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

12 distinct on this digest

Findings for digest 5ce7540c3c00 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-8rm2-7qqf-34qmgithub.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty0.305.2
LowGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.82.11.83.1
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.82.11.83.1
LowGHSA-vffh-x6r8-xx99github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty0.311.2-0.20260410083055-07c6232d159b
LowGHSA-fw8g-cg8f-9j28github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty0.311.3
LowGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.82.11.82.2
LowGO-2026-6355golang.org/x/crypto@v0.54.00.56.0
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.55.8no fix listed
LowGO-2026-6303golang.org/x/crypto@v0.54.00.55.0
LowGO-2026-6354golang.org/x/crypto@v0.54.00.56.0
LowGO-2022-0635github.com/aws/aws-sdk-go@v1.55.8no fix listed
LowGO-2026-5932golang.org/x/crypto@v0.54.0no fix listed

Used by

2 charts
ChartVersionTagContainers
prometheusprometheus-communityOfficialVerified publisher29.29.0, 29.28.1, 29.28.0, 29.27.2, 29.27.1v3.14.05
prometheuswenerme29.29.0, 29.28.1, 29.28.0, 29.27.2, 29.27.1v3.14.05

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.