Vulnerability Reportadminer:5.4.2-standalone

adminer:5.4.2-standaloneadminer:5.4.2
digestsha256:983261ecc40a4aaf11e25aeda8ef821f5a43a9f024b3967c81cbcc0e6ce43ba3

Executive Summary

Last scanned:

Threat Score
25/100NEEDS ATTENTION
Reputation
TRUSTED

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. One moderate-severity vulnerability (CVE-2026-33630) exists in the c-ares library, which could lead to denial of service or memory corruption if the container receives a crafted malicious DNS response. However, exploitation requires the attacker to control the DNS server or be on the network path, making it not directly triggerable from inbound HTTP traffic. The image is from Docker Official and pinned by digest, ensuring a trusted baseline. As a best practice, ensure the container uses a trusted DNS resolver and restrict network exposure to limit attack surface.

Vulnerabilities

Vulnerability Log

1 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-33630MEDIUM6
c-ares
1.34.6-r0
fixed in 1.34.8-r0
Directly ExposedContext importance: MEDIUM

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.