Vulnerability Reportamazon/aws-for-fluent-bit:latest

amazon/aws-for-fluent-bit:latestamazon/aws-for-fluent-bit:2.34.3.20261028
digestsha256:b1c72ff69d4159e3c8912d8a333d90f6c7b7c84efac2ec23ea37b0db19b40bb1

Executive Summary

Last scanned:

Threat Score
25/100NEEDS ATTENTION
Reputation
TRUSTED

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The scan found no exposed or post-exploit vulnerabilities, so the current score reflects the surrounding conditions rather than a known flaw. The main concern is the operating system, which is past end of support and will no longer receive security fixes, so any future vulnerability in its libraries would stay open. Running as root by default and listening on port 2020 increase the consequences of any future compromise, so consider a non-root user and a network policy limiting access to that port.

Hardening plan for this image · 1 step

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

0 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.