quay.io/snowdrop/spring-boot-rest-http-example:2.7 container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/snowdrop/spring-boot-rest-http-example

quay.io/snowdrop/spring-boot-rest-http-example:2.7 resolved to b1a054613715, scanned 14 Sept 2026: 177 findings, 4 critical, 5 on KEV; deployed by 1 chart, among them redhat-springboot-rest.

Radar Score

3,06341150112

177 findings on digest b1a054613715 · scanned 14 Sept 2026

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.7resolves to	b1a054613715	1 chart	5 days ago	41150112	3,063

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

112 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest b1a054613715 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Low	DSA-5678-1	glibc@2.31-13+deb11u3	2.31-13+deb11u10
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u8
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u7
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.31	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.31	no fix listed
Low	DSA-5357-1	git@1:2.30.2-1	1:2.30.2-1+deb11u2
Low	DLA-4061-1	libtasn1-6@4.16.0-2	4.16.0-2+deb11u2
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.3.31	no fix listed
Low	DLA-4031-1	git@1:2.30.2-1	1:2.30.2-1+deb11u4
Low	DLA-4145-1	expat@2.2.10-2+deb11u3	2.2.10-2+deb11u7
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.5	2.18.8
Low	DLA-4481-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u2
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.31	no fix listed
Low	DLA-4490-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u5
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.5	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.31	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.5	2.18.9
Low	DLA-4455-1	python3.9@3.9.2-1	3.9.2-1+deb11u5
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.31	no fix listed
Low	DLA-4259-1	systemd@247.3-7	247.3-7+deb11u7
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.7.18	no fix listed
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u6
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.31	5.3.39
Low	DLA-4133-1	wget@1.21-1+deb11u1	1.21-1+deb11u2
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u9
Low	GHSA-7g45-4rm6-3mm3	guava@25.0-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.12	1.3.16
Low	DLA-4176-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	DLA-4181-1	glibc@2.31-13+deb11u3	2.31-13+deb11u13
Low	GHSA-5mg8-w23w-74h3	guava@25.0-jre	32.0.0-android
Low	DLA-4065-1	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6
Low	DLA-4094-1	mercurial@5.6.1-4	5.6.1-4+deb11u1
Low	GHSA-957g-f97v-vppc	spring-webmvc@5.3.31	no fix listed
Low	DLA-4306-1	pam@1.4.0-9+deb11u1	1.4.0-9+deb11u2
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@5.3.31	no fix listed
Low	DLA-4130-1	shadow@1:4.8.1-1	1:4.8.1-1+deb11u1
Low	DLA-4396-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u1
Low	DLA-4143-1	glibc@2.31-13+deb11u3	2.31-13+deb11u12
Low	DLA-4195-1	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u7
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@9.0.83	9.0.118
Low	GHSA-659m-px2c-25wj	spring-core@5.3.31	no fix listed
Low	GHSA-ggg2-9786-hwc8	spring-boot-autoconfigure@2.7.18	no fix listed
Low	DLA-4156-1	openssh@1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u5
Low	GHSA-4wp7-92pw-q264	spring-context@5.3.31	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.3.31	no fix listed
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.3.31	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
redhat-springboot-restopenshift	0.0.1	2.7	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.