ITRS Analytics Security Updates
This page provides security information for ITRS Analytics installations. Regular security scanning is performed on all ITRS Analytics components to identify and document known vulnerabilities (CVEs) in third-party libraries, Docker images, and dependencies.
Security vulnerabilities can pose significant risks to your deployment. This page helps you:
- Identify known security issues in your current ITRS Analytics version.
- Understand the severity and impact of each vulnerability.
- Plan upgrades and remediation activities based on risk assessment.
- Stay informed about ongoing security improvements and fixes.
Note
The following table lists the images or libraries affected by recently identified Common Vulnerabilities and Exposures (CVEs) from the latest security scan, along with the relevant ITRS Analytics components, and is updated with each new packaging release.
Installation package 2.18.11+p2.18.7 Copied
Scan date: 14 August 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.7image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.18.7 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High |
|
Utility |
| docker.itrsgroup.com/iax/ch-migration:2.18.7 | High |
|
|
| docker.itrsgroup.com/iax/clickhouse:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/iax/collection-agent:2.18.7 | High |
|
Collection |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.7 | High |
|
Utility |
| docker.itrsgroup.com/iax/dpd:2.18.7 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.7 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.18.7 | High | CVE-2026-56852 | Utility |
| docker.itrsgroup.com/iax/platformd:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/postgres:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/iax/sinkd:2.18.7 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/timescale:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.6.0 | High | CVE-2026-35568 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.8.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-secrets-ui:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.16.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.13.0 | High |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.6.0 | High |
|
Installation Telemetry |
Installation package 2.18.10+p2.18.7 Copied
Scan date: 12 August 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.7image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.7 | High | GHSA-R7WM-3CXJ-WFF9 | Utility |
| docker.itrsgroup.com/iax/dpd:2.18.7 | High | GHSA-R7WM-3CXJ-WFF9 | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.7 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/platform-tools:2.18.7 | High | CVE-2026-56852 | Utility |
| docker.itrsgroup.com/iax/postgres:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.6.0 | High | CVE-2026-35568 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-secrets-ui:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-formmonitor-ui:2.16.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.4.0 | High |
|
Application |
Installation package 2.18.9+p2.18.7 Copied
Scan date: 5 August 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.7image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.7 | High |
|
Utility |
| docker.itrsgroup.com/iax/dpd:2.18.7 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.7 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/platform-tools:2.18.7 | High | CVE-2026-56852 | Utility |
| docker.itrsgroup.com/iax/postgres:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.6.0 | High | CVE-2026-35568 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-secrets-ui:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.16.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
Installation package 2.18.8+p2.18.7 Copied
Scan date: 4 August 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.7image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.7 | High |
|
Utility |
| docker.itrsgroup.com/iax/dpd:2.18.7 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.7 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.7 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/platform-tools:2.18.7 | High | CVE-2026-56852 | Utility |
| docker.itrsgroup.com/iax/postgres:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.18.7 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.6.0 | High | CVE-2026-35568 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-secrets-ui:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.20.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.16.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High | CVE-2026-56408 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.4.0 | High |
|
Application |
Installation package 2.18.7+p2.18.6 Copied
Scan date: 23 July 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.6image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.18.6 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/ch-migration:2.18.6 | Critical | CVE-2026-13221 |
|
| docker.itrsgroup.com/iax/clickhouse:2.18.6 | High | CVE-2026-39822 | Database |
| docker.itrsgroup.com/iax/collection-agent:2.18.6 | High |
|
Collection |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.6 | High |
|
Utility |
| docker.itrsgroup.com/iax/dpd:2.18.6 | Critical | CVE-2026-13221 | Data pipeline |
| docker.itrsgroup.com/iax/final-entity-stream:2.18.6 | Critical | CVE-2026-13221 | Data pipeline |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.18.6 | Critical | CVE-2026-13221 | Data pipeline |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.3.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.6 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platformd:2.18.6 | Critical | CVE-2026-13221 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.18.6 | Critical | CVE-2026-13221 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.18.6 | Critical | CVE-2026-13221 | Data pipeline |
| docker.itrsgroup.com/iax/status-metrics-stream:2.18.6 | Critical | CVE-2026-13221 |
|
| docker.itrsgroup.com/iax/timescale:2.18.6 | Critical | CVE-2026-13221 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-secrets-ui:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.20.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.12.0 | High |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.5.3 | High | CVE-2026-39822 | Installation Telemetry |
Installation package 2.18.6+p2.18.6 Copied
Scan date: 16 July 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.6image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/clickhouse:2.18.6 | High | CVE-2026-39822 | Database |
| docker.itrsgroup.com/iax/collection-agent:2.18.6 | High | CVE-2026-44891 | Collection |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.2.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.6 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.6 | High | CVE-2026-39822 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.18.6 | High |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.18.6 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.4.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.4.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.20.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.5.3 | High | CVE-2026-39822 | Installation Telemetry |
Installation package 2.18.5+p2.18.6 Copied
Scan date: 10 July 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.6image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.2.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.6 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.4.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.4.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.20.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.18.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.4.0 | High |
|
Application |
Installation package 2.18.4+p2.18.5 Copied
Scan date: 29 June 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.5image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | High |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.18.5 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17-v3-r149 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/ch-migration:2.18.5 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/clickhouse-health-check:2.18.5 | High |
|
Database |
| docker.itrsgroup.com/iax/clickhouse-schema:2.18.5 | High | CVE-2026-45447 | Database |
| docker.itrsgroup.com/iax/clickhouse:2.18.5 | High | CVE-2026-45447 | Database |
| docker.itrsgroup.com/iax/collection-agent:2.18.5 | High |
|
Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.5 | High |
|
Utility |
| docker.itrsgroup.com/iax/dpd:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/final-entity-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/iamd:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.2.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka-health-check:2.18.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/kafka:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.5 | Critical |
|
Platform services |
| docker.itrsgroup.com/iax/licenced:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.5 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.18.5 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/platformd:2.18.5 | Critical | CVE-2026-8376 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.18.5 | Critical | CVE-2026-8376 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.18.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/status-metrics-stream:2.18.5 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/timescale:2.18.5 | Critical | CVE-2026-8376 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.4.1 | Critical | CVE-2026-35568 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.4.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.20.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High | CVE-2026-45447 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.27.0 | High | CVE-2026-45447 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High | CVE-2026-45447 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.11.0 | High |
|
Application |
Installation package 2.18.3+p2.18.5 Copied
Scan date: 23 June 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.5image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | High |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.18.5 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17-v3-r149 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r147 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/ch-migration:2.18.5 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/clickhouse-health-check:2.18.5 | High | CVE-2026-45447 | Database |
| docker.itrsgroup.com/iax/clickhouse-schema:2.18.5 | High | CVE-2026-45447 | Database |
| docker.itrsgroup.com/iax/clickhouse:2.18.5 | High | CVE-2026-45447 | Database |
| docker.itrsgroup.com/iax/collection-agent:2.18.5 | High |
|
Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.18.5 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/dpd:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/final-entity-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/iamd:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.2.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka-health-check:2.18.5 | High | CVE-2026-45447 | Data pipeline |
| docker.itrsgroup.com/iax/kafka:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.5 | Critical |
|
Platform services |
| docker.itrsgroup.com/iax/licenced:2.18.5 | High | CVE-2026-45447 | Platform services |
| docker.itrsgroup.com/iax/loki:2.18.5 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.18.5 | High | CVE-2026-45447 | Utility |
| docker.itrsgroup.com/iax/platformd:2.18.5 | Critical | CVE-2026-8376 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.18.5 | Critical | CVE-2026-8376 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.18.5 | High | CVE-2026-45447 | Data pipeline |
| docker.itrsgroup.com/iax/status-metrics-stream:2.18.5 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/timescale:2.18.5 | Critical | CVE-2026-8376 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-logs-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.12.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.9.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.20.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.17.0 | High | CVE-2026-45447 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.27.0 | High | CVE-2026-45447 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.13.0 | High | CVE-2026-45447 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.11.0 | High |
|
Application |
Installation package 2.18.2+p2.18.5 Copied
Scan date: 11 June 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.5image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r51 | High | CVE-2026-42504 |
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r51 | High | CVE-2026-42504 |
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r46 | High | CVE-2026-42504 |
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r51 | High | CVE-2026-42504 |
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-26.4-r3 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-26.4-r4 | High |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.18.5 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17-v3-r133 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r101 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r134 | High |
|
Utility |
| docker.itrsgroup.com/iax/ch-migration:2.18.5 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/collection-agent:2.18.5 | High |
|
Collection |
| docker.itrsgroup.com/iax/dpd:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/final-entity-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/keycloak:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.5 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.18.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platformd:2.18.5 | Critical | CVE-2026-8376 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.18.5 | Critical | CVE-2026-8376 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.18.5 | Critical | CVE-2026-8376 | Data pipeline |
| docker.itrsgroup.com/iax/status-metrics-stream:2.18.5 | Critical | CVE-2026-8376 |
|
| docker.itrsgroup.com/iax/timescale:2.18.5 | Critical | CVE-2026-8376 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-embabel:0.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.5.1 | High | CVE-2026-32316 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.6.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.8.0 | High | CVE-2026-32316 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.8.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.19.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.18.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.15.0 | High | CVE-2026-32316 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.3.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.10.0 | High |
|
Application |
Installation package 2.18.1+p2.18.3 Copied
Scan date: 21 May 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.3image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r129 | High | CVE-2026-42945 | Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r38 | High | CVE-2026-42945 | Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r59 | High | CVE-2026-33814 |
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.18.3 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17-v3-r119 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r101 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r122 | High |
|
Utility |
| docker.itrsgroup.com/iax/clickhouse:2.18.3 | High |
|
Database |
| docker.itrsgroup.com/iax/collection-agent:2.18.3 | High |
|
Collection |
| docker.itrsgroup.com/iax/etcd:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/iam-tools:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka:2.18.3 | Critical | CVE-2026-2332 | Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.3 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/operator:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.18.3 | High |
|
Utility |
| docker.itrsgroup.com/iax/postgres:2.18.3 | High |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.18.3 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-spring-ai:0.3.0 | Critical |
|
Application |
Installation package 2.18.0+p2.18.3 Copied
Scan date: 6 May 2026
Note
Thedocker.itrsgroup.com/iax/loki:2.18.3image is included only to support migrations from ITRS Analytics 2.17.x to 2.18.x when logs collection is enabled. If logs collection is not currently enabled, Loki is not installed. It is a temporary migration component and is not part of the long-term deployment. It will be removed once the ITRS Analytics 2.18.x installation is complete.
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-postgres:17-v3-r89 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r101 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-tools:5-v2-r96 | High |
|
Utility |
| docker.itrsgroup.com/iax/etcd:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/itrs-docs-index-faiss:0.1.0 | High |
|
Application |
| docker.itrsgroup.com/iax/kafka:2.18.3 | Critical | CVE-2026-2332 | Platform services |
| docker.itrsgroup.com/iax/keycloak:2.18.3 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.18.3 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-spring-ai:0.3.0 | High | CVE-2026-35568 | Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.3.0 | High |
|
Installation Telemetry |
Installation package 2.17.12 Copied
Scan date: 29 April 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r34 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r30 | High |
|
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r87 | High |
|
Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r27 | High |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r36 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High |
|
|
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/keycloak:2.17.7 | Critical |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.7 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-faiss:0.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-spring-ai:0.2.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.2.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.4 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.5 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.5 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.5 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.2.0 | High |
|
Installation Telemetry |
Installation package 2.17.11 Copied
Scan date: 1 April 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r87 | Critical | CVE-2026-33186 | Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r36 | High | CVE-2026-4437 |
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | High | CVE-2026-25679 |
|
| docker.itrsgroup.com/iax/backup-manager:2.17.6 | Critical | CVE-2026-33701 | Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.6 | High | CVE-2026-2673 | Database |
| docker.itrsgroup.com/iax/clickhouse:2.17.6 | High | CVE-2026-2673 | Database |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.6 | Critical | CVE-2026-33701 | Collection |
| docker.itrsgroup.com/iax/collection-agent:2.17.6 | Critical | CVE-2026-33701 | Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.6 | Critical | CVE-2026-33701 | Utility |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/dpd:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/etcd:2.17.6 | Critical | CVE-2026-33186 | Platform services |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.17.6 | Critical | CVE-2026-33186 | Platform services |
| docker.itrsgroup.com/iax/iamd:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/kafka:2.17.6 | High | CVE-2025-67030 | Platform services |
| docker.itrsgroup.com/iax/keycloak:2.17.6 | High | CVE-2025-59250 | Platform services |
| docker.itrsgroup.com/iax/latest-metrics:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/licenced:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/loki:2.17.6 | Critical |
|
Installation Telemetry |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.6 | High | CVE-2026-27135 | Utility |
| docker.itrsgroup.com/iax/operator:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.6 | Critical | CVE-2026-33186 | Utility |
| docker.itrsgroup.com/iax/platformd:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.6 | High | CVE-2026-27135 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.17.6 | Critical | CVE-2026-33701 | Data pipeline |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.6 | Critical | CVE-2026-33701 | Platform services |
| docker.itrsgroup.com/iax/timescale-schema:2.17.6 | Critical | CVE-2026-33186 | Database |
| docker.itrsgroup.com/iax/timescale:2.17.6 | High | CVE-2026-27135 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-faiss:0.2.0 | High | CVE-2026-2673 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-spring-ai:0.2.0 | Critical | CVE-2026-22732 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-ai-ui:0.2.0 | Critical | CVE-2026-22732 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.3 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.4 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.5 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.5 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.5 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.1 | High | CVE-2026-25679 | Installation Telemetry |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.17.1 | Critical | CVE-2026-33186 | Installation Telemetry |
Installation package 2.17.10 Copied
Scan date: 25 March 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r30 | Critical |
|
|
| docker.itrsgroup.com/cgr/cert-manager-cainjector:1.19-r30 | Critical |
|
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r30 | Critical |
|
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r28 | Critical |
|
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r30 | Critical |
|
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r74 | Critical |
|
Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r24 | Critical |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r36 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | Critical |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.17.6 | High | CVE-2026-27135 | Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.6 | High |
|
Database |
| docker.itrsgroup.com/iax/clickhouse:2.17.6 | High |
|
Database |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.6 | High | CVE-2026-27135 | Collection |
| docker.itrsgroup.com/iax/collection-agent:2.17.6 | High | CVE-2026-27135 | Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.17.6 | High | CVE-2026-27135 | Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.6 | High | CVE-2026-27135 | Utility |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/dpd:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/etcd:2.17.6 | Critical | CVE-2026-33186 | Platform services |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.17.6 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/iamd:2.17.6 | High | CVE-2026-27135 | Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/kafka:2.17.6 | Critical |
|
Data pipeline |
| docker.itrsgroup.com/iax/keycloak:2.17.6 | Critical | CVE-2021-42575 | Platform services |
| docker.itrsgroup.com/iax/latest-metrics:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/licenced:2.17.6 | High | CVE-2026-27135 | Platform services |
| docker.itrsgroup.com/iax/loki:2.17.6 | Critical |
|
Logs and audit |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.6 | Critical |
|
Data pipeline |
| docker.itrsgroup.com/iax/operator:2.17.6 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.17.6 | High | CVE-2026-27135 | Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.6 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/platformd:2.17.6 | High | CVE-2026-27135 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.6 | High | CVE-2026-27135 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.17.6 | High | CVE-2026-27135 | Data pipeline |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.6 | High | CVE-2026-27135 | Database |
| docker.itrsgroup.com/iax/timescale-schema:2.17.6 | Critical |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.17.6 | High | CVE-2026-27135 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.3 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.4 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.1 | High | CVE-2026-25679 | Installation Telemetry |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.17.1 | Critical |
|
Installation Telemetry |
Installation package 2.17.9 Copied
Scan date: 17 March 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r28 | Critical | CVE-2024-24790 |
|
| docker.itrsgroup.com/cgr/cert-manager-cainjector:1.19-r28 | Critical | CVE-2024-24790 |
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r28 | Critical |
|
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r25 | Critical | CVE-2024-24790 |
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r28 | Critical |
|
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r70 | Critical |
|
Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r22 | Critical |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r32 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | Critical | CVE-2025-68121 |
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | Critical |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.17.5 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.5 | High | CVE-2026-3805 | Database |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.5 | High |
|
Collection |
| docker.itrsgroup.com/iax/collection-agent:2.17.5 | High |
|
Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.5 | High |
|
Utility |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/dpd:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/etcd:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.17.5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/iamd:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/kafka:2.17.5 | Critical |
|
Data pipeline |
| docker.itrsgroup.com/iax/keycloak:2.17.5 | Critical | CVE-2021-42575 | Platform services |
| docker.itrsgroup.com/iax/latest-metrics:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/licenced:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.5 | Critical |
|
Logs and audit |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/operator:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/platformd:2.17.5 | High |
|
Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.5 | High |
|
Database |
| docker.itrsgroup.com/iax/signals-stream:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.17.5 | High |
|
Data pipeline |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.5 | High |
|
Database |
| docker.itrsgroup.com/iax/timescale-schema:2.17.5 | Critical |
|
Database |
| docker.itrsgroup.com/iax/timescale:2.17.5 | High |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.3 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.4 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.1 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.1 | High |
|
Installation Telemetry |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.17.1 | Critical |
|
Installation Telemetry |
Installation package 2.17.8 Copied
Scan date: 4 March 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r26 | Critical | CVE-2024-24790 |
|
| docker.itrsgroup.com/cgr/cert-manager-cainjector:1.19-r26 | Critical | CVE-2024-24790 |
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r26 | Critical |
|
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r23 | Critical | CVE-2024-24790 |
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r26 | Critical |
|
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r61 | Critical |
|
Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r19 | Critical |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r28 | Critical |
|
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | Critical | CVE-2025-68121 |
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r26 | Critical |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Collection |
| docker.itrsgroup.com/iax/collection-agent:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Utility |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/dpd:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/etcd:2.17.5 | Critical | CVE-2026-24051 | Platform services |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.17.5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/iamd:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/kafka:2.17.5 | Critical |
|
Data pipeline |
| docker.itrsgroup.com/iax/keycloak:2.17.5 | Critical | CVE-2021-42575 | Platform services |
| docker.itrsgroup.com/iax/latest-metrics:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/licenced:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Platform services |
| docker.itrsgroup.com/iax/loki:2.17.5 | Critical |
|
Logs and audit |
| docker.itrsgroup.com/iax/operator:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/platformd:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Platform services |
| docker.itrsgroup.com/iax/signals-stream:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Data pipeline |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.5 | Critical | GHSA-72HV-8253-57QQ | Database |
| docker.itrsgroup.com/iax/timescale-schema:2.17.5 | Critical |
|
Database |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | Critical | CVE-2025-68121 | Installation Telemetry |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.14.0 | Critical |
|
Installation Telemetry |
Installation package 2.17.7 Copied
Scan date: 25 February 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r24 | High | CVE-2026-24051 |
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r24 | High | CVE-2026-24051 |
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r52 | Critical | CVE-2025-1974 | Networking |
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | Critical | CVE-2025-68121 |
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical |
|
|
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical |
|
Utility |
| docker.itrsgroup.com/iax/etcd:2.17.4 | High | CVE-2026-24051 | Platform services |
| docker.itrsgroup.com/iax/keycloak:2.17.4 | High | CVE-2025-59250 | Platform services |
| docker.itrsgroup.com/iax/loki:2.17.4 | Critical |
|
Logs and audit |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.4 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | Critical | CVE-2025-68121 | Installation Telemetry |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.14.0 | Critical | CVE-2025-68121 | Installation Telemetry |
Installation package 2.17.6 Copied
Scan date: 10 February 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r47 | Critical | CVE-2025-1974 | Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r15 | High |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/backup-manager:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.2 | Critical | CVE-2025-15467 | Database |
| docker.itrsgroup.com/iax/clickhouse:2.17.2 | Critical | CVE-2025-15467 | Database |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.2 | Critical | CVE-2025-15467 | Collection |
| docker.itrsgroup.com/iax/collection-agent:2.17.2 | Critical | CVE-2025-15467 | Collection |
| docker.itrsgroup.com/iax/configuration-installer:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/dpd:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/etcd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/iam-tools:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/iamd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/kafka:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/keycloak:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/latest-metrics:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/licenced:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/loki:2.17.2 | Critical |
|
Logs and audit |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/operator:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/platform-statusd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/platformd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.2 | Critical | CVE-2025-15467 | Database |
| docker.itrsgroup.com/iax/signals-stream:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/sinkd:2.17.2 | Critical | CVE-2025-15467 | Data pipeline |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.2 | Critical | CVE-2025-15467 | Database |
| docker.itrsgroup.com/iax/timescale-schema:2.17.2 | Critical | CVE-2025-15467 | Database |
| docker.itrsgroup.com/iax/timescale:2.17.2 | Critical | CVE-2025-15467 | Database |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | High |
|
Installation Telemetry |
Installation package 2.17.5 Copied
Scan date: 4 February 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r15 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-cainjector:1.19-r15 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r15 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r13 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r15 | High |
|
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r39 | Critical | CVE-2025-1974 | Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r15 | High |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r17 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r16 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/iax/backup-manager:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/cgr-tools:5 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/clickhouse:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.2 | Critical | CVE-2025-15467 | Monitoring |
| docker.itrsgroup.com/iax/collection-agent:2.17.2 | Critical | CVE-2025-15467 | Monitoring |
| docker.itrsgroup.com/iax/configuration-installer:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/dpd:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/etcd:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/iam-tools:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/iamd:2.17.2 | Critical | CVE-2025-15467 | Identity and Access Management |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.2 | Critical | CVE-2025-15467 | Service Mesh |
| docker.itrsgroup.com/iax/kafka:2.17.2 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/keycloak:2.17.2 | Critical | CVE-2025-15467 | Identity and Access Management |
| docker.itrsgroup.com/iax/latest-metrics:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/licenced:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/loki:2.17.2 | Critical |
|
Service Mesh |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/operator:2.17.2 | Critical |
|
|
| docker.itrsgroup.com/iax/platform-statusd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.2 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/platformd:2.17.2 | Critical | CVE-2025-15467 | Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.2 | Critical | CVE-2025-15467 |
|
| docker.itrsgroup.com/iax/signals-stream:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/sinkd:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/iax/timescale-schema:2.17.2 | Critical | CVE-2025-15467 | Utility |
| docker.itrsgroup.com/iax/timescale:2.17.2 | Critical | CVE-2025-15467 | Data Plane |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | Critical | CVE-2025-15467 | Identity and Access Management |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | Critical | CVE-2025-15467 | Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.3 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | Critical | CVE-2025-15467 | Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.1 | Critical | CVE-2025-15467 | Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | High |
|
Utility |
Installation package 2.17.4 Copied
Scan date: 29 January 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r15 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/cgr/cert-manager-cainjector:1.19-r15 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r15 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r13 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r15 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r36 | Critical | CVE-2025-1974 | Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r14 | High | CVE-2025-15281 | Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r15 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | High |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r16 | High | CVE-2025-15281 |
|
| docker.itrsgroup.com/iax/backup-manager:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5 | High |
|
Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/clickhouse:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.2 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/collection-agent:2.17.2 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/configuration-installer:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/dpd:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/etcd:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/iam-tools:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/iamd:2.17.2 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.2 | High |
|
Service Mesh |
| docker.itrsgroup.com/iax/kafka:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/keycloak:2.17.2 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/latest-metrics:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/licenced:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.2 | Critical |
|
Service Mesh |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/operator:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/platform-statusd:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/platformd:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/signals-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/sinkd:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-schema:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/timescale:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.0 | High |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | High |
|
Utility |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.12.1 | High |
|
Installation Telemetry |
Installation package 2.17.3 Copied
Scan date: 26 January 2026
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/cert-manager-acmesolver:1.19-r10 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-cainjector:1.19-r10 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-controller:1.19-r10 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-startupapicheck:1.19-r9 | High |
|
|
| docker.itrsgroup.com/cgr/cert-manager-webhook:1.19-r10 | High |
|
|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r28 | Critical | CVE-2025-1974 | Networking |
| docker.itrsgroup.com/cgr/kube-webhook-certgen:1.13-r10 | High |
|
Networking |
| docker.itrsgroup.com/cgr/linkerd-cni-plugin:1.6-r11 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r7 | High |
|
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r11 | High |
|
|
| docker.itrsgroup.com/cgr/trust-manager:0.20-r11 | High |
|
|
| docker.itrsgroup.com/iax/backup-manager:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/cgr-postgres:17.6-v2-r7 | High |
|
|
| docker.itrsgroup.com/iax/cgr-tools:5 | High |
|
Utility |
| docker.itrsgroup.com/iax/clickhouse-schema:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/clickhouse:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.2 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/collection-agent:2.17.2 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/configuration-installer:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/dpd:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/etcd:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/iam-tools:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/iamd:2.17.2 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.2 | High |
|
Service Mesh |
| docker.itrsgroup.com/iax/kafka:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/keycloak:2.17.2 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/latest-metrics:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/licenced:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.2 | Critical |
|
Service Mesh |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/operator:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/platform-statusd:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/platformd:2.17.2 | High |
|
Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.2 | High |
|
|
| docker.itrsgroup.com/iax/signals-stream:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/sinkd:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-schema:2.17.2 | High |
|
Utility |
| docker.itrsgroup.com/iax/timescale:2.17.2 | High |
|
Data Plane |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.4.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.5.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.22.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.22.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.22.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.0 | High |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | High |
|
Utility |
| proxy.itrsgroup.com/library/replicated-sdk-image:1.12.1 | High |
|
Installation Telemetry |
Installation package 2.17.2 Copied
Scan date: 18 December 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/linkerd-controller:edge-25.11-r6 | High | CVE-2025-61729 |
|
| docker.itrsgroup.com/cgr/linkerd-proxy:edge-25.11-r10 | High | CVE-2025-61729 |
|
| docker.itrsgroup.com/iax/backup-manager:2.17.0 | High |
|
Utility |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.0 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/collection-agent:2.17.0 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/configuration-installer:2.17.0 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/dpd:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/etcd:2.17.0 | High | CVE-2025-61729 | Utility |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/iam-tools:2.17.0 | High | CVE-2025-61729 | Utility |
| docker.itrsgroup.com/iax/iamd:2.17.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.0 | High |
|
Service Mesh |
| docker.itrsgroup.com/iax/kafka:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/keycloak:2.17.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/latest-metrics:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/licenced:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.0 | Critical |
|
Service Mesh |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/operator:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/platform-statusd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platform-tools:2.17.0 | High | CVE-2025-61729 |
|
| docker.itrsgroup.com/iax/platformd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/postgres:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/signals-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/sinkd:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-schema:2.17.0 | High | CVE-2025-61729 | Utility |
| docker.itrsgroup.com/iax/timescale:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.3.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.3.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.4.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.1 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.8.0 | High |
|
Application |
| docker.itrsgroup.com/replicated/replicated-tools:2.0.0 | High | CVE-2025-61729 | Utility |
| proxy.replicated.com/library/replicated-sdk-image:1.11.2 | High | CVE-2025-617 | Installation Telemetry |
Installation package 2.17.1 Copied
Scan date: 3 December 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/iax/backup-manager:2.17.0 | High |
|
Utility |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.0 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/collection-agent:2.17.0 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/configuration-installer:2.17.0 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/dpd:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/iamd:2.17.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.0 | High |
|
Service Mesh |
| docker.itrsgroup.com/iax/kafka:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/keycloak:2.17.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/latest-metrics:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/licenced:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.0 | Critical |
|
Service Mesh |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.0 | High | CVE-2025-62703 | Platform services |
| docker.itrsgroup.com/iax/operator:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/platform-statusd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platformd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/signals-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/sinkd:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.4.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.7.0 | High |
|
Application |
Installation package 2.17.0 Copied
Scan date: 2 December 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/iax/backup-manager:2.17.0 | High |
|
Utility |
| docker.itrsgroup.com/iax/collection-agent-privileged:2.17.0 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/collection-agent:2.17.0 | High |
|
Monitoring |
| docker.itrsgroup.com/iax/configuration-installer:2.17.0 | High |
|
Utility |
| docker.itrsgroup.com/iax/data-pipeline-utility:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/downsampled-metrics-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/dpd:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/final-entity-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/iamd:2.17.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/intermediate-entity-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/kafka-health-check:2.17.0 | High |
|
Service Mesh |
| docker.itrsgroup.com/iax/kafka:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/keycloak:2.17.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/iax/latest-metrics:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/licenced:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/loki:2.17.0 | Critical |
|
Service Mesh |
| docker.itrsgroup.com/iax/metrics-forecastd:2.17.0 | High | CVE-2025-62703 | Platform services |
| docker.itrsgroup.com/iax/operator:2.17.0 | High |
|
|
| docker.itrsgroup.com/iax/platform-statusd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/platformd:2.17.0 | High |
|
Platform services |
| docker.itrsgroup.com/iax/signals-stream:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/sinkd:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/iax/timescale-health-check:2.17.0 | High |
|
Data Plane |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-daemon:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-capacity-ui:1.1.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-iam-ui:1.4.0 | High |
|
Identity and Access Management |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-cleanup-client:1.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-daemon:1.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/iax-app-signal-generator-ui:1.6.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-alerting-ui:2.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-api-gateway:2.8.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-audit-ui:1.2.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-entities-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-metrics-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-capacity-planner-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-daemon:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-rest-server:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-centralised-config-ui:2.5.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-daemon:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-commands-ui:1.7.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-dashboard-ui:1.17.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-entities-ui:1.16.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-bff-daemon:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-fixmonitor-ui:2.13.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-ingestion-ui:2.8.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-notifier-daemon:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-notifications-ui:3.10.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-platform-tools-cli:1.13.0 | High |
|
Platform |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-bff-intelli-views-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-query-service-sink-daemon:2.21.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-daemon:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-signal-forecaster-ui:2.11.0 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-traces-ui:1.2.2 | High |
|
Application |
| docker.itrsgroup.com/obcerv/app/obcerv-app-webconsole:3.7.0 | High |
|
Application |
Installation package 2.16.4 Copied
Scan date: 21 November 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| docker.itrsgroup.com/cgr/ingress-nginx-controller:1.13-r3 | Critical | CVE-2025-1974 | Networking |
| docker.itrsgroup.com/iax/kafka:2.16.3 | Critical | CVE-2025-12383 |
|
| docker.itrsgroup.com/iax/keycloak:2.16.3 | High | CVE-2025-59250 | Identity and Access Management |
| docker.itrsgroup.com/iax/loki:2.16.2 | Critical |
|
Service Mesh |
| proxy.replicated.com/library/replicated-sdk-image:1.8.1 | High |
|
Installation Telemetry |
Installation package 2.16.3 Copied
Scan date: 14 November 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
|
High |
|
|
| docker.itrsgroup.com/chainguard/linkerd-controller:edge-25.9.1-r0 | High |
|
|
| docker.itrsgroup.com/chainguard/ingress-nginx-controller:1.13.2-r2@sha256:1bd6b123a12d29663d37122d356422285df59b7410f0c57e7934a390c4513ef4 | Critical | CVE-2025-1974 | Networking |
|
High |
|
|
| docker.itrsgroup.com/iax/loki:2.16.2 | Critical |
|
Service Mesh |
| proxy.replicated.com/library/replicated-sdk-image:1.8.1 | High |
|
Installation Telemetry |
| docker.itrsgroup.com/replicated/replicated-tools:1.5.7 | High |
|
|
| docker.itrsgroup.com/iax/metrics-forecastd:2.16.2 | High |
|
Platform services |
Installation package 2.16.2 Copied
Scan date: 12 November 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
|
High |
|
|
| docker.itrsgroup.com/chainguard/linkerd-controller:edge-25.9.1-r0 | High |
|
|
| docker.itrsgroup.com/chainguard/ingress-nginx-controller:1.13.2-r2@sha256:1bd6b123a12d29663d37122d356422285df59b7410f0c57e7934a390c4513ef4 | Critical | CVE-2025-1974 | Networking |
|
High |
|
|
| docker.itrsgroup.com/iax/loki:2.16.2 | Critical |
|
Service Mesh |
| proxy.replicated.com/library/replicated-sdk-image:1.8.1 | High |
|
Installation Telemetry |
| docker.itrsgroup.com/replicated/replicated-tools:1.5.7 | High |
|
|
Installation package 2.16.1 Copied
Scan date: 5 November 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
|
High |
|
|
| docker.itrsgroup.com/chainguard/ingress-nginx-controller:1.13.2-r2@sha256:1bd6b123a12d29663d37122d356422285df59b7410f0c57e7934a390c4513ef4 | Critical | CVE-2025-1974 | Networking |
|
High |
|
|
| docker.itrsgroup.com/iax/keycloak:2.16.2 | High | CVE-2025-59250 | Identity and Access Management |
| docker.itrsgroup.com/iax/loki:2.16.2 | Critical |
|
Service Mesh |
| proxy.replicated.com/library/replicated-sdk-image:1.8.1 | High | CVE-2025-58187 | Installation Telemetry |
Installation package 2.16.0 Copied
Scan date: 30 October 2025
| Container images | Severity | CVE | Subsystems |
|---|---|---|---|
| k8s.io/ingress-nginx v1.13.2 | Critical | CVE-2025-1974 | Networking |
| Netty 4.1.127 | High | CVE-2025-59419 | Collection Agent |
| Loki | Critical |
|
Logging infrastructure |
| obcerv-app-platform-tools-cli:1.11.0 | High |
|
Platform |
Disclaimer
The information contained in this document is for general information and guidance on our products, services, and other matters. It is only for information purposes and is not intended as advice which should be relied upon. We try to ensure that the content of this document is accurate and up-to-date, but this cannot be guaranteed. Changes may be made to our products, services, and other matters which are not noted or recorded herein. All liability for loss and damage arising from reliance on this document is excluded (except where death or personal injury arises from our negligence or loss or damage arises from any fraud on our part).