atlassian/bitbucket-server

by atlassian ← project: Atlassian
RODEO
F
score 0
Pull →
Rebuilt 2.8y ago29 critical CVEs1 arch
docker pull atlassian/bitbucket-server

Image metadata

PULL COUNT
—
repository-level (not per-tag)
SIZE (COMPRESSED)
824 MB
ARCHITECTURES
1
RUNS AS
root
image config.User
LAST PUSHED
2.8y ago
2024-02-10 16:31:34
MANIFEST DIGEST
sha256:06f0713a41a3…
from registry manifest

Latest scan

2026-11-04 07:08:21 UTC · 10d ago

OPEN CVES BY SEVERITY

19
CRITICAL
196
HIGH
239
MEDIUM
46
LOW/NEG
Grype DB 2026-11-03T06:20:47.000Z · rubric cerodeo-v2

RUBRIC BREAKDOWN (8 signals that moved the score)

-675 · Critical CVEs (fixable) -2670 · High CVEs (fixable) -3273 · Medium CVEs (fixable) -16 · Critical CVEs (no fix) -66 · High CVEs (no fix) -464 · medium_unfixable +10 · Rebuilt in last 90 days +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Syft SBOM JSON (feeds grype) Full scan history JSON (1 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh atlassian/bitbucket-server \ --rubric cerodeo-v2 \ --grype-db 2026-11-03T06:20:47.000Z
verify-score.sh rubric spec (cerodeo-v2.json)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
GHSA-24rp-q3w6-vc56 CRITICAL 10.0 postgresql 42.6.0 fixed in 42.6.1
GHSA-f58c-gq56-vjjf CRITICAL 10.0 tika-core 2.7.0 fixed in 3.2.2
GHSA-4wrc-f8pq-fpqp CRITICAL 9.8 spring-web 5.3.31 fixed in 6.0.0
GHSA-83qj-6fr2-vhqg CRITICAL 9.8 tomcat-embed-core 9.0.83 fixed in 9.0.99
GHSA-9xv2-5v5q-p794 CRITICAL 9.8 tomcat-embed-core 9.0.83 fixed in 9.0.121
GHSA-h6fc-48rj-7qqh CRITICAL 9.8 tomcat-embed-core 9.0.83 fixed in 9.0.118
GHSA-pc63-qcmh-9cmg CRITICAL 9.8 spring-webmvc 5.3.31 no fix available
GHSA-r29c-68gh-xp6x CRITICAL 9.8 tomcat-embed-core 9.0.83 fixed in 9.0.118
GHSA-r7pg-v2c8-mfg3 CRITICAL 9.8 avro 1.11.3 fixed in 1.11.4
GHSA-xw5h-cmh3-8j6j CRITICAL 9.8 cxf-core 3.5.5 fixed in 3.6.12
GHSA-5m62-pw8w-7w9f CRITICAL 9.1 tomcat-embed-core 9.0.83 fixed in 9.0.118
GHSA-9pwp-9qqc-pr26 CRITICAL 9.1 bcprov-lts8on 2.73.3 fixed in 2.73.12
GHSA-9pwp-9qqc-pr26 CRITICAL 9.1 bcprov-lts8on 2.73.3 fixed in 2.73.12
GHSA-9pwp-9qqc-pr26 CRITICAL 9.1 bcprov-jdk15to18 1.75 fixed in 1.85
GHSA-9pwp-9qqc-pr26 CRITICAL 9.1 bc-fips 1.0.2.4 fixed in 1.0.2.7
GHSA-c4q5-6c82-3qpw CRITICAL 9.1 spring-security-web 5.8.9 fixed in 5.8.15
GHSA-gcx9-497g-6cp6 CRITICAL 9.1 tomcat-embed-core 9.0.83 fixed in 9.0.121
GHSA-h3x4-894j-xpx5 CRITICAL 9.1 tomcat-embed-core 9.0.83 fixed in 9.0.121
GHSA-mf92-479x-3373 CRITICAL 9.1 spring-security-web 5.8.9 no fix available
GHSA-5j33-cvvr-w245 HIGH 9.8 tomcat-embed-core 9.0.83 fixed in 9.0.98
GHSA-p93r-85wp-75v3 HIGH 8.9 bcprov-jdk15to18 1.75 fixed in 1.80.2
GHSA-59j4-wjwp-mw9m HIGH 8.8 velocity 1.6.4-atlassian-26 no fix available
GHSA-vqf4-7m7x-wgfc HIGH 8.8 lz4-java 1.8.0 fixed in 1.8.1
GHSA-wxr5-93ph-8wr9 HIGH 8.8 commons-beanutils 1.9.4 fixed in 1.11.0
GHSA-wxr5-93ph-8wr9 HIGH 8.8 commons-beanutils 1.9.4 fixed in 1.11.0
GHSA-wxr5-93ph-8wr9 HIGH 8.8 commons-beanutils 1.9.4 fixed in 1.11.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.14.2 fixed in 2.15.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.13.4 fixed in 2.15.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.13.4 fixed in 2.15.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.14.2 fixed in 2.15.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.13.4 fixed in 2.15.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.12.7 fixed in 2.15.0
GHSA-h46c-h94j-95f3 HIGH 8.7 jackson-core 2.14.2 fixed in 2.15.0
GHSA-jppx-w49h-x2qq HIGH 8.7 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-jppx-w49h-x2qq HIGH 8.7 netty-codec-http 4.1.101.Final fixed in 4.1.136.Final
GHSA-jppx-w49h-x2qq HIGH 8.7 netty-codec-http 4.1.101.Final fixed in 4.1.136.Final
GHSA-jppx-w49h-x2qq HIGH 8.7 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-jppx-w49h-x2qq HIGH 8.7 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-vv7r-c36w-3prj HIGH 8.7 commons-fileupload 1.5 fixed in 1.6.0
GHSA-w9fj-cfpg-grvv HIGH 8.7 netty-codec-http2 4.1.100.Final fixed in 4.1.132.Final
GHSA-w9fj-cfpg-grvv HIGH 8.7 netty-codec-http2 4.1.100.Final fixed in 4.1.132.Final
GHSA-w9fj-cfpg-grvv HIGH 8.7 netty-codec-http2 4.1.100.Final fixed in 4.1.132.Final
CVE-2025-50059 HIGH 8.6 openjdk 17.0.10+7 fixed in 11.0.28
GHSA-7jqf-v358-p8g7 HIGH 8.6 tomcat-embed-core 9.0.83 fixed in 9.0.90
GHSA-cmp6-m4wj-q63q HIGH 8.2 lz4-java 1.8.0 no fix available
GHSA-f3jh-qvm4-mg39 HIGH 8.2 spring-security-core 5.8.9 fixed in 5.8.11
CVE-2025-30749 HIGH 8.1 openjdk 17.0.10+7 fixed in 1.8.0_462
CVE-2025-50106 HIGH 8.1 openjdk 17.0.10+7 fixed in 1.8.0_462
GHSA-2wrp-6fg6-hmc5 HIGH 8.1 spring-web 5.3.31 fixed in 5.3.34
GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.101.Final fixed in 4.1.135.Final
GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.100.Final fixed in 4.1.135.Final
GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.100.Final fixed in 4.1.135.Final
GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.100.Final fixed in 4.1.135.Final
GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.101.Final fixed in 4.1.135.Final
GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.101.Final fixed in 4.1.135.Final
GHSA-ccgv-vj62-xf9h HIGH 8.1 spring-web 5.3.31 fixed in 5.3.32
GHSA-hgjh-9rj2-g67j HIGH 8.1 spring-web 5.3.31 fixed in 5.3.33
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.15.3 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.13.4.2 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.13.4.2 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.12.7.1 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.16.1 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.16.1 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.15.3 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.15.3 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.15.2 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-m494-w24q-6f7w HIGH 8.1 mssql-jdbc 9.4.1 fixed in 10.2.4.jre11
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.14.2 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.15.3 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.16.1 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.13.4.2 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.13.4.2 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.12.7.1 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.16.1 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.15.3 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.15.3 fixed in 2.18.8
GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.15.2 fixed in 2.18.8
GHSA-c5vj-wp4v-mmvx HIGH 7.6 hazelcast 5.2.2 fixed in 5.2.4
GHSA-xh6m-7cr7-xx66 HIGH 7.6 hazelcast 5.2.2 fixed in 5.2.5
CVE-2025-53066 HIGH 7.5 openjdk 17.0.10+7 fixed in 1.8.0_472
CVE-2026-21589 HIGH 7.5 bitbucket-service-api 8.18.0 fixed in 9.4.26
CVE-2026-21945 HIGH 7.5 openjdk 17.0.10+7 fixed in 1.8.0_482
CVE-2026-22016 HIGH 7.5 openjdk 17.0.10+7 fixed in 1.8.0_492
CVE-2026-34282 HIGH 7.5 openjdk 17.0.10+7 fixed in 1.8.0_492
GHSA-25xr-qj8w-c4vf HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.107
GHSA-264p-99wq-f4j6 HIGH 7.5 ion-java 1.0.2 no fix available
GHSA-3vqj-43w4-2q58 HIGH 7.5 json 20220320 fixed in 20230227
GHSA-493p-pfq6-5258 HIGH 7.5 json-smart 2.4.7 fixed in 2.4.9
GHSA-4g8c-wm8x-jfhw HIGH 7.5 netty-handler 4.1.101.Final fixed in 4.1.118.Final
GHSA-4g8c-wm8x-jfhw HIGH 7.5 netty-handler 4.1.100.Final fixed in 4.1.118.Final
GHSA-4g8c-wm8x-jfhw HIGH 7.5 netty-handler 4.1.100.Final fixed in 4.1.118.Final
GHSA-4g8c-wm8x-jfhw HIGH 7.5 netty-handler 4.1.100.Final fixed in 4.1.118.Final
GHSA-4g8c-wm8x-jfhw HIGH 7.5 netty-handler 4.1.101.Final fixed in 4.1.118.Final
GHSA-4g8c-wm8x-jfhw HIGH 7.5 netty-handler 4.1.101.Final fixed in 4.1.118.Final
GHSA-4jq9-2xhw-jpx7 HIGH 7.5 json 20220320 fixed in 20231013
GHSA-563x-q5rq-57qp HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.116
GHSA-65r4-943x-97jj HIGH 7.5 jsoup 1.17.2 fixed in 1.23.2
GHSA-6jqx-86gh-f27w HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.136.Final
GHSA-6jqx-86gh-f27w HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-6jqx-86gh-f27w HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.136.Final
GHSA-6jqx-86gh-f27w HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-6jqx-86gh-f27w HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-735f-pc8j-v9w8 HIGH 7.5 protobuf-java 3.23.4 fixed in 3.25.5
GHSA-735f-pc8j-v9w8 HIGH 7.5 protobuf-java 3.23.4 fixed in 3.25.5
GHSA-78wr-2p64-hpwj HIGH 7.5 commons-io 2.11.0 fixed in 2.14.0
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.15.3 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.16.1 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.16.1 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.15.3 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.15.2 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.13.4 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.14.2 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.14.2 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.13.4 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.12.7 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.14.2 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.13.4 fixed in 2.18.11
GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.15.3 fixed in 2.18.11
GHSA-93wv-jw9v-4972 HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.136.Final
GHSA-93wv-jw9v-4972 HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.136.Final
GHSA-93wv-jw9v-4972 HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.136.Final
GHSA-98qh-xjc8-98pq HIGH 7.5 postgresql 42.6.0 fixed in 42.7.11
GHSA-cm33-6792-r9fm HIGH 7.5 netty-codec-dns 4.1.101.Final fixed in 4.1.133.Final
GHSA-cx7f-g6mp-7hqm HIGH 7.5 spring-webmvc 5.3.31 no fix available
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.133.Final
GHSA-f6hv-jmp6-3vwv HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.133.Final
GHSA-fh5r-crhr-qrrq HIGH 7.5 cxf-core 3.5.5 fixed in 3.5.10
GHSA-g3pr-3p32-fp23 HIGH 7.5 micrometer-core 1.12.1 no fix available
GHSA-g3pr-3p32-fp23 HIGH 7.5 micrometer-core 1.11.6 no fix available
GHSA-g5vr-rgqm-vf78 HIGH 7.5 spring-webmvc 5.3.31 no fix available
GHSA-gqp3-2cvr-x8m3 HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.108
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 9.30.2 fixed in 9.37.2
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 9.9.3 fixed in 9.37.2
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 9.31 fixed in 9.37.2
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 9.31 fixed in 9.37.2
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 9.31 fixed in 9.37.2
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 8.20.1 fixed in 9.37.2
GHSA-gvpg-vgmx-xg6w HIGH 7.5 nimbus-jose-jwt 9.31 fixed in 9.37.2
GHSA-gx5v-xp9w-j4cg HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.118
GHSA-h3gc-qfqq-6h8f HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.106
GHSA-hfq9-hggm-c56q HIGH 7.5 xstream 1.4.20 fixed in 1.4.21
GHSA-mgp5-rv84-w37q HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.115
GHSA-mvh2-crg5-v77c HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-mvh2-crg5-v77c HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.136.Final
GHSA-mvh2-crg5-v77c HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.136.Final
GHSA-mvh2-crg5-v77c HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-mvh2-crg5-v77c HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.136.Final
GHSA-pq2g-wx69-c263 HIGH 7.5 json-smart 2.5.0 fixed in 2.5.2
GHSA-pq2g-wx69-c263 HIGH 7.5 json-smart 2.5.0 fixed in 2.5.2
GHSA-pq2g-wx69-c263 HIGH 7.5 json-smart 2.5.0 fixed in 2.5.2
GHSA-prj3-ccx8-p6x4 HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.124.Final
GHSA-prj3-ccx8-p6x4 HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.124.Final
GHSA-prj3-ccx8-p6x4 HIGH 7.5 netty-codec-http2 4.1.100.Final fixed in 4.1.124.Final
GHSA-pwqr-wmgm-9rr8 HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.132.Final
GHSA-pwqr-wmgm-9rr8 HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.132.Final
GHSA-pwqr-wmgm-9rr8 HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.132.Final
GHSA-pwqr-wmgm-9rr8 HIGH 7.5 netty-codec-http 4.1.100.Final fixed in 4.1.132.Final
GHSA-pwqr-wmgm-9rr8 HIGH 7.5 netty-codec-http 4.1.101.Final fixed in 4.1.132.Final
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.15.3 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.14.2 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.14.2 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.14.2 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.14.2 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.15.2 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.16.1 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.16.1 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.15.3 fixed in 2.18.10
GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.15.3 fixed in 2.18.10
GHSA-qp49-qgx5-5m26 HIGH 7.5 bcprov-lts8on 2.73.3 fixed in 2.73.12
GHSA-qp49-qgx5-5m26 HIGH 7.5 bcprov-lts8on 2.73.3 fixed in 2.73.12
GHSA-qp49-qgx5-5m26 HIGH 7.5 bcprov-jdk15to18 1.75 fixed in 1.85
GHSA-qp49-qgx5-5m26 HIGH 7.5 bc-fips 1.0.2.4 fixed in 1.0.2.7
GHSA-wm9w-rjj3-j356 HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.90
GHSA-wmwf-9ccg-fff5 HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.109
GHSA-wr62-c79q-cv37 HIGH 7.5 tomcat-embed-core 9.0.83 fixed in 9.0.107
GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.100.Final fixed in 4.1.135.Final
GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.100.Final fixed in 4.1.135.Final
GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.101.Final fixed in 4.1.135.Final
GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.101.Final fixed in 4.1.135.Final
GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.101.Final fixed in 4.1.135.Final
GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.100.Final fixed in 4.1.135.Final
CVE-2024-21147 HIGH 7.4 openjdk 17.0.10+7 fixed in 1.8.0_422
CVE-2025-21587 HIGH 7.4 openjdk 17.0.10+7 fixed in 1.8.0_452
CVE-2026-21932 HIGH 7.4 openjdk 17.0.10+7 fixed in 1.8.0_482
GHSA-355h-qmc2-wpwf HIGH 7.4 jetty-http 9.4.53.v20231009 fixed in 9.4.60
GHSA-mg83-c7gq-rv5c HIGH 7.4 spring-security-crypto 5.8.9 fixed in 5.8.18
GHSA-57rv-r2g8-2cj3 HIGH 7.3 netty-codec-http 4.1.100.Final fixed in 4.1.133.Final
+ 300 more in the raw JSON

Scan history

1 total · first 10d ago
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
10d ago F 0 29 289 1555 2026-11-03T06:20:47.000Z

Discussion

No comments yet. Be the first.