Vulnerability Reportapache/apisix:3.14.0-debian

apache/apisix:3.14.0-debian
digestsha256:e3ef0a9d31e021e4c85d05caea051db9b1115009822e8b605cff999d51ca4141

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit remotely reachable vulnerabilities such as CVE-2026-33846 to cause denial of service via a crafted DTLS handshake, or CVE-2023-2953 to trigger a null pointer dereference in the OpenLDAP library, potentially crashing the gateway. While post-exploit findings are minimal (max severity 4.13), the exposed surface contains 174 vulnerabilities, 16 of which are high-severity. Restrict network access to the gateway and apply vendor patches before any production use; note that the listed high-severity issues reside in default system libraries and require no special configuration to be reachable.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

281 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2019-9192HIGH7.5
libc-bin
2.31-13+deb11u13
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-9192HIGH7.5
libc6
2.31-13+deb11u13
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-33560HIGH7.5
libgcrypt20
1.8.7-6
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2018-6829HIGH7.5
libgcrypt20
1.8.7-6
No fix yet
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-33846HIGH7.5
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-42009HIGH7.5
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2018-5709HIGH7.5
libkrb5-3
1.18.3-6+deb11u7
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2018-5709HIGH7.5
libkrb5support0
1.18.3-6+deb11u7
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-2953HIGH7.5
libldap-2.4-2
2.4.57+dfsg-3+deb11u1
No fix yet
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-2953HIGH7.5
libldap2-dev
2.4.57+dfsg-3+deb11u1
No fix yet
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-41409HIGH7.5
libpcre2-8-0
10.36-2+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-20838HIGH7.5
libpcre3
2:8.39-13
No fix yet
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388HIGH7.5
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u7
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-28389HIGH7.5
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-28390HIGH7.5
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-4899HIGH7.5
libzstd1
1.4.8+dfsg-2.1
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc-bin
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u7
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.4%
Theoretical Threat
Directly Exposed
CVE-2020-13529MEDIUM6.1
libsystemd0
247.3-7+deb11u7
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-13529MEDIUM6.1
libudev1
247.3-7+deb11u7
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.2.53-10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2015-3276MEDIUM6
libldap-2.4-2
2.4.57+dfsg-3+deb11u1
No fix yet
5.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-28388MEDIUM6
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u7
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2023-4806MEDIUM5.9
libc-bin
2.31-13+deb11u13
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc-bin
2.31-13+deb11u13
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc6
2.31-13+deb11u13
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc6
2.31-13+deb11u13
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.8.7-6
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.18.3-6+deb11u7
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.18.3-6+deb11u7
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.18.3-6+deb11u7
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.18.3-6+deb11u7
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.16.0-2+deb11u2
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-22185MEDIUM5.78
libldap-2.4-2
2.4.57+dfsg-3+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-22185MEDIUM5.78
libldap2-dev
2.4.57+dfsg-3+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4105MEDIUM5.7
libsystemd0
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4105MEDIUM5.7
libudev1
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u4
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.1-5+deb11u8
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.31-13+deb11u13
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.31-13+deb11u13
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
247.3-7+deb11u7
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.2.53-10
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.4.48-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.31-13+deb11u13
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.31-13+deb11u13
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.31-13+deb11u13
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.31-13+deb11u13
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.23.22-1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.31-13+deb11u13
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.31-13+deb11u13
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u7
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u7
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u7
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u7
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u8
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2017-16231MEDIUM4.67
libpcre3
2:8.39-13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2.1~deb11u1
fixed in 5.2.5-2.1~deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u8
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
247.3-7+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
247.3-7+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
247.3-7+deb11u7
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
247.3-7+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
247.3-7+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
247.3-7+deb11u7
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.31-13+deb11u13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.31-13+deb11u13
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.31-13+deb11u13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.31-13+deb11u13
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.18.3-6+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.18.3-6+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.18.3-6+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.18.3-6+deb11u7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2020-15719MEDIUM4.2
libldap-2.4-2
2.4.57+dfsg-3+deb11u1
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-15719MEDIUM4.2
libldap2-dev
2.4.57+dfsg-3+deb11u1
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-28387MEDIUM4.13
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Post-Exploit
CVE-2023-4039MEDIUM4.08
libgcc-s1
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules-bin
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-runtime
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam0g
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libstdc++6
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2019-8457MEDIUM4.06
libdb5.3
5.3.28+dfsg1-0.8
No fix yet
45.4%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2017-14159MEDIUM4
libldap-2.4-2
2.4.57+dfsg-3+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2017-14159MEDIUM4
libldap2-dev
2.4.57+dfsg-3+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules-bin
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-runtime
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam0g
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.31-13+deb11u13
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.31-13+deb11u13
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-3715LOW3.98
bash
5.1-2+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.10-4+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69421LOW3.82
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69419LOW3.77
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1+deb11u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-8058LOW3.57
libc-bin
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.31-13+deb11u13
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc-bin
2.31-13+deb11u13
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.31-13+deb11u13
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42010LOW3.53
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-9820LOW3.4
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u9
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2016-2781LOW3.31
coreutils
8.32-4+b1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.32.1-4+deb11u4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.7-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.31-13+deb11u13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.31-13+deb11u13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-14104LOW3.11
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
8.32-4+b1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69420LOW3.01
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.01
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.32.1-4+deb11u4
fixed in 5.32.1-4+deb11u5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u8
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl1.1
1.1.1w-0+deb11u3
fixed in 1.1.1w-0+deb11u8
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u8
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.32.1-4+deb11u4
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2017-7245LOW2.81
libpcre3
2:8.39-13
No fix yet
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-7246LOW2.81
libpcre3
2:8.39-13
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW2.8
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2013-4392LOW2.8
libsystemd0
247.3-7+deb11u7
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
247.3-7+deb11u7
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
247.3-7+deb11u7
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
247.3-7+deb11u7
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30
3.7.1-5+deb11u8
fixed in 3.7.1-5+deb11u10
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.31-13+deb11u13
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.31-13+deb11u13
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libgssapi-krb5-2
1.18.3-6+deb11u7
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libk5crypto3
1.18.3-6+deb11u7
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2017-17740LOW2.7
libldap-2.4-2
2.4.57+dfsg-3+deb11u1
No fix yet
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2015-3276LOW2.7
libldap2-dev
2.4.57+dfsg-3+deb11u1
No fix yet
5.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-17740LOW2.7
libldap2-dev
2.4.57+dfsg-3+deb11u1
No fix yet
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2017-11164LOW2.7
libpcre3
2:8.39-13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u8
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.32.1-4+deb11u4
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
login
1:4.8.1-1+deb11u1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.8.1-1+deb11u1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
8.32-4+b1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
login
1:4.8.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68160LOW2.4
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.2%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
passwd
1:4.8.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
8.32-4+b1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW2.24
coreutils
8.32-4+b1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-69418LOW2.04
openssl
1.1.1w-0+deb11u4
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.32.1-4+deb11u4
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-68973NONE0
gpgv
2.2.27-2+deb11u2
fixed in 2.2.27-2+deb11u3
0.1%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-10-base
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-9-base
9.3.0-22
No fix yet
0.8%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.1-2+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.36.1-8+deb11u2
No fix yet
—
Not Applicable
DLA-4485-1NONE0
ca-certificates
20210119
fixed in 20230311+deb12u1~deb11u1
—
Not Applicable
CVE-2026-53910NONE0
diffutils
1:3.7-5
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.20.13
fixed in 1.20.14
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libmount1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libmount1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2025-27587NONE0
libssl1.1
1.1.1w-0+deb11u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.8.1-1+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
mount
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
mount
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2025-27587NONE0
openssl
1.1.1w-0+deb11u4
No fix yet
0.4%
Theoretical Threat
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.8.1-1+deb11u1
No fix yet
—
Not Applicable
CVE-2026-57433NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
2.96-7+deb11u1
No fix yet
—
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1+deb11u1
No fix yet
—
Not Applicable
DLA-4403-1NONE0
tzdata
2025b-0+deb11u1
fixed in 2025b-0+deb11u2
—
Not Applicable
DLA-4569-1NONE0
tzdata
2025b-0+deb11u1
fixed in 2026b-0+deb11u1
—
Not Applicable
CVE-2026-53615NONE0
util-linux
2.36.1-8+deb11u2
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
util-linux
2.36.1-8+deb11u2
No fix yet
—
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.