Vulnerability Reportadminer:5.4.2-standalone

adminer:5.4.2-standaloneadminer:5.4.2
digestsha256:983261ecc40a4aaf11e25aeda8ef821f5a43a9f024b3967c81cbcc0e6ce43ba3

Executive Summary

Last scanned:

Threat Score
25/100NEEDS ATTENTION
Reputation
TRUSTED

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. One moderate-severity vulnerability (CVE-2026-33630) exists in the c-ares library, which could lead to denial of service or memory corruption if the container receives a crafted malicious DNS response. However, exploitation requires the attacker to control the DNS server or be on the network path, making it not directly triggerable from inbound HTTP traffic. The image is from Docker Official and pinned by digest, ensuring a trusted baseline. As a best practice, ensure the container uses a trusted DNS resolver and restrict network exposure to limit attack surface.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

1 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-33630MEDIUM6
c-ares
1.34.6-r0
fixed in 1.34.8-r0
—
Directly ExposedContext importance: MEDIUM

Want to check another image? Run a full scan with the Docker Security Scanner.