Last scanned:
This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The two most notable findings, CVE-2025-15467 in openssl-libs and CVE-2025-6965 in sqlite-libs, carry moderate severity and only matter if a derived application processes untrusted CMS data or runs attacker-supplied SQL. Because the base itself runs no such service, the practical risk today is low, but any image built on it will inherit these libraries and should be checked for those code paths. Updating the affected packages in the final image is the straightforward way to clear these findings before production. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.
Hardening plan for this image · 3 steps
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2025-15467 | MEDIUM6 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 74.8% Actively Exploited | Directly Exposed |
| CVE-2025-6965 | MEDIUM6 | sqlite-libs 3.34.1-8.el9_6 fixed in 3.34.1-9.el9_7 | 73.5% Actively Exploited | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-15468 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-66199 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-69420 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-22796 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42764 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42769 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-63073 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-9076 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.9 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-2.el9_8 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2025-9230 | MEDIUM5.6 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-4.el9_7 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-15469 | MEDIUM5.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-22795 | MEDIUM5.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | MEDIUM5.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-58016 | MEDIUM5.34 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33845 | MEDIUM5.34 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 2.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42010 | MEDIUM5.34 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-45445 | MEDIUM5.34 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM5.3 | glibc 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | glibc 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM5.3 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM5.3 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42766 | MEDIUM5.3 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42767 | MEDIUM5.3 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63387 | MEDIUM5.16 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-74860 | MEDIUM5.1 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.5 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-63388 | MEDIUM5.04 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | glibc 2.34-168.el9_6.24 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | glibc 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | MEDIUM5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42013 | MEDIUM4.92 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5260 | MEDIUM4.92 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM4.92 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM4.92 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-45447 | MEDIUM4.86 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 4.0% Low-Moderate Risk | Directly Exposed |
| CVE-2025-68160 | MEDIUM4.7 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-4598 | MEDIUM4.7 | systemd-libs 252-51.el9_6.3.alma.2 fixed in 252-55.el9_7.7.alma.1 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-86138 | MEDIUM4.68 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86140 | MEDIUM4.68 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-86142 | MEDIUM4.68 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-86144 | MEDIUM4.68 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM4.68 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM4.68 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-11822 | MEDIUM4.68 | sqlite-libs 3.34.1-8.el9_6 fixed in 3.34.1-11.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-11824 | MEDIUM4.68 | sqlite-libs 3.34.1-8.el9_6 fixed in 3.34.1-11.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-63382 | MEDIUM4.62 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-63385 | MEDIUM4.62 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM4.56 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM4.56 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-33846 | MEDIUM4.5 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42009 | MEDIUM4.5 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-40355 | MEDIUM4.5 | krb5-libs 1.21.1-8.el9_6 fixed in 1.21.1-10.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM4.5 | krb5-libs 1.21.1-8.el9_6 fixed in 1.21.1-10.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63383 | MEDIUM4.5 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-63384 | MEDIUM4.5 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-27135 | MEDIUM4.5 | libnghttp2 1.43.0-6.el9 fixed in 1.43.0-6.el9_7.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-69421 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-14456 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-14457 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-18798 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2026-34183 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-54874 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63075 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63076 | MEDIUM4.5 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3833 | MEDIUM4.44 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42011 | MEDIUM4.44 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34182 | MEDIUM4.44 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-89157 | MEDIUM4.44 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM4.44 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86143 | MEDIUM4.38 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42012 | MEDIUM4.26 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54369 | MEDIUM4.26 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4878 | MEDIUM4.2 | libcap 2.48-9.el9_2 fixed in 2.48-10.el9_8.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40468 | MEDIUM4.14 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40553 | MEDIUM4.14 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-13601 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-18.el9_7.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-14087 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-16118 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.10 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-58010 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58011 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58012 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58013 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58014 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-58015 | MEDIUM4.14 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-0861 | MEDIUM4.14 | glibc 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0861 | MEDIUM4.14 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0861 | MEDIUM4.14 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-231.el9_7.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41989 | MEDIUM4.14 | libgcrypt 1.10.0-11.el9 fixed in 1.10.0-13.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-48864 | MEDIUM4.14 | libsolv 0.7.24-3.el9 fixed in 0.7.24-6.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11979 | MEDIUM4.14 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.4 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6653 | MEDIUM4.14 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69419 | MEDIUM4.14 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-28390 | MEDIUM4.14 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-3.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM4.14 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-1.el9_8 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | MEDIUM4.14 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.8-2.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-2100 | MEDIUM4.14 | p11-kit 0.25.3-3.el9_5 fixed in 0.26.2-1.el9 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-2100 | MEDIUM4.14 | p11-kit-trust 0.25.3-3.el9_5 fixed in 0.26.2-1.el9 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-29111 | MEDIUM4.14 | systemd-libs 252-51.el9_6.3.alma.2 fixed in 252-67.el9_8.2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-1965 | MEDIUM4.08 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-1965 | MEDIUM4.08 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | glibc 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69418 | MEDIUM4 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-42014 | LOW3.96 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-63381 | LOW3.96 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11856 | LOW3.9 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8924 | LOW3.9 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-14512 | LOW3.9 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | glibc 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | glibc-common 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | glibc-minimal-langpack 2.34-168.el9_6.24 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-11856 | LOW3.9 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8924 | LOW3.9 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-63379 | LOW3.9 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | LOW3.9 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | LOW3.9 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | LOW3.9 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | LOW3.9 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-13151 | LOW3.9 | libtasn1 4.16.0-9.el9 fixed in 4.16.0-10.el9_8 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-54370 | LOW3.78 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | LOW3.78 | libattr 2.5.1-3.el9 fixed in 2.6.0-1.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34181 | LOW3.78 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42768 | LOW3.78 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | LOW3.72 | p11-kit 0.25.3-3.el9_5 fixed in 0.26.4-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | LOW3.72 | p11-kit-trust 0.25.3-3.el9_5 fixed in 0.26.4-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.7 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56392 | LOW3.66 | coreutils-single 8.32-39.el9 fixed in 8.32-41.el9_8.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-14104 | LOW3.66 | libblkid 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-14104 | LOW3.66 | libmount 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-14104 | LOW3.66 | libsmartcols 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-14104 | LOW3.66 | libuuid 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11187 | LOW3.66 | openssl-libs 1:3.2.2-6.el9_5.1 fixed in 1:3.5.1-7.el9_7 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-89156 | LOW3.54 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | LOW3.54 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-3783 | LOW3.42 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-3783 | LOW3.42 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58055 | LOW3.24 | libnghttp2 1.43.0-6.el9 fixed in 1.43.0-6.el9_8.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-9086 | LOW3.18 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-35.el9_7.3 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2026-15588 | LOW3.18 | glib2 2.68.4-16.el9_6.3 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42015 | LOW3.18 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-14831 | LOW3.18 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.3-10.el9_7 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-9086 | LOW3.18 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-35.el9_7.3 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2026-8286 | LOW2.92 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8458 | LOW2.92 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.7 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-8286 | LOW2.92 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8458 | LOW2.92 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.7 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-9714 | LOW2.8 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-8927 | LOW2.7 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-4111 | LOW2.7 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-7.el9_7 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-4424 | LOW2.7 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-9.el9_7 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2026-5121 | LOW2.7 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-9.el9_7 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-8927 | LOW2.7 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-9547 | LOW2.66 | curl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9547 | LOW2.66 | libcurl-minimal 7.76.1-31.el9_6.1 fixed in 7.76.1-40.el9_8.5 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-68973 | LOW2.52 | gnupg2 2.3.3-4.el9 fixed in 2.3.3-5.el9_7 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-40467 | LOW2.48 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-14164 | LOW2.48 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-11.el9_8 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-114406 | LOW2.45 | ca-certificates 2024.2.69_v8.0.303-91.4.el9_4 fixed in 2026.2.92_v9.0.319-90.3.el9_8 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-9820 | LOW2.4 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.3-10.el9_7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2024-34459 | LOW2.34 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.1 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2025-5278 | LOW2.24 | coreutils-single 8.32-39.el9 fixed in 8.32-41.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-3832 | LOW2.22 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-5419 | LOW2.22 | gnutls 3.8.3-6.el9_6.2 fixed in 3.8.10-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2024-56433 | LOW1.84 | shadow-utils 2:4.9-12.el9 fixed in 2:4.9-15.el9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-6170 | LOW1.27 | libxml2 2.9.13-12.el9_6 fixed in 2.9.13-14.el9_8.2 | 0.3% Theoretical Threat | Directly Exposed |
Want to check another image? Run a full scan with the Docker Security Scanner.