quay.io/rhdh/rhdh-hub-rhel9:latest container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/rhdh/rhdh-hub-rhel9

quay.io/rhdh/rhdh-hub-rhel9:latest resolved to 0b26358f5793, scanned 14 Sept 2026: 144 findings, 0 critical; deployed by 1 chart, among them backstage.

Radar Score

1,3390012132

144 findings on digest 0b26358f5793 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
latestresolves to	0b26358f5793	1 chart	yesterday	0012132	1,339

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

144 distinct on this digest

Findings for digest 0b26358f5793 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.46.0	0.52.0
Medium	GHSA-5xpp-75jx-m839	systeminformation@5.31.6	5.31.7
Medium	GHSA-38jv-5279-wg99	urllib3@2.2.2	2.6.3
Medium	GHSA-cfcw-xp6x-25gj	vm2@3.11.5	3.11.6
Medium	GO-2026-4887	github.com/docker/docker@v28.5.1+incompatible	no fix listed
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.46.0	0.52.0
Medium	GHSA-2xpw-w6gg-jr37	urllib3@2.2.2	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@2.2.2	2.6.0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.46.0	0.52.0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.46.0	0.52.0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.46.0	0.52.0
Medium	GHSA-m283-3h24-438v	vm2@3.11.5	3.11.6
Low	PYSEC-2026-2132	click@8.1.7	8.3.3
Low	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.39.0	1.41.0
Low	GHSA-vxpw-j846-p89q	undici@6.26.0	6.27.0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-gm37-52c6-37mw	pymdown-extensions@10.19.1	11.0.1
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.3	1.83.1
Low	GHSA-gmc2-2x9w-cgh9	vm2@3.11.5	3.11.6
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.12.0	1.13.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-rpmf-866q-6p89	basic-ftp@5.3.0	5.3.1
Low	GHSA-4cwx-7wf7-3272	undici@7.28.0	7.29.0
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.1.3	3.1.4
Low	GHSA-c2c7-rcm5-vvqj	picomatch@2.3.1	2.3.2
Low	GHSA-wf93-45jw-7689	pip@22.3.1	26.1.2
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.3.0	4.3.2
Low	GHSA-r292-9mhp-454m	tar@7.5.19	7.5.21
Low	GHSA-hq3h-g68c-hp78	urllib@4.9.0	4.9.1
Low	GHSA-w5hq-g745-h8pq	uuid@11.1.0	11.1.1
Low	GHSA-qfvm-cv95-jqjf	multer@2.2.0	2.3.0
Low	GHSA-wc9g-mqfw-jrwm	multer@2.2.0	2.3.0
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v28.5.1+incompatible	no fix listed
Low	GHSA-64mm-vxmg-q3vj	http-proxy-middleware@2.0.9	2.0.10
Low	GHSA-gcq2-9pq2-cxqm	http-proxy-middleware@3.0.5	3.0.7
Low	GHSA-535w-7cp7-47q4	multer@2.2.0	2.3.0
Low	GHSA-rmvr-2pp2-xj38	@octokit/request@6.2.8	8.4.1
Low	GHSA-f5mr-q85p-6hh6	github.com/sigstore/fulcio@v1.7.1	1.8.6
Low	GHSA-8cw4-87c7-c6xx	csv-parse@6.2.1	7.0.2
Low	GHSA-m5w8-4gq2-6f8x	vm2@3.11.5	3.11.6
Low	GHSA-5jgf-p345-68v8	fast-uri@3.1.3	3.1.6
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.3	3.1.6
Low	GHSA-4xh5-x5gv-qwph	pip@22.3.1	25.3
Low	GHSA-h5c3-5r3r-rr8q	@octokit/plugin-paginate-rest@6.1.2	9.2.2
Low	GHSA-xx4v-prfh-6cgc	@octokit/request-error@3.0.3	5.1.1
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@3.1.3	3.1.5
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.3	3.1.6
Low	GHSA-fph4-wmhf-6fwf	fast-uri@3.1.3	3.1.6

Used by

1 chart

Chart	Version	Tag	Containers
backstagerhdh-chartVerified publisher	4.0.1	latest	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.