Vulnerability Reportapache/apisix:3.15.0-ubuntu

apache/apisix:3.15.0-ubuntu
digestsha256:142dde6b11d7dd2a4e1440906910595aad04f05d6d39a6591b5845ac4707bc6e

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

101 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-31789MEDIUM5
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-45447MEDIUM4.86
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45445MEDIUM4.64
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-28388MEDIUM4.5
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389MEDIUM4.5
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390MEDIUM4.5
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28387MEDIUM4.13
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31790LOW3.54
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42770LOW3.01
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42010NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-31789NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Not Applicable
CVE-2026-8376NONE0
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-33845NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.8%
Theoretical Threat
Not Applicable
CVE-2026-45445NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42496NONE0
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42013NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5260NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Not Applicable
CVE-2026-45447NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Not Applicable
CVE-2026-28387NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-29111NONE0
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-29111NONE0
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-41989NONE0
libgcrypt20
1.10.3-2build1
fixed in 1.10.3-2ubuntu0.1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-33846NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-42009NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Not Applicable
CVE-2019-20838NONE0
libpcre3
2:8.39-15build1
No fix yet
2.8%
Low-Moderate Risk
Not Applicable
CVE-2026-28388NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-3833NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42011NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.5%
Theoretical Threat
Not Applicable
CVE-2026-34182NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42012NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4878NONE0
libcap2
1:2.66-5ubuntu2.2
fixed in 1:2.66-5ubuntu2.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-42014NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-40225NONE0
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Not Applicable
CVE-2026-40226NONE0
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-40225NONE0
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Not Applicable
CVE-2026-40226NONE0
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-5958NONE0
sed
4.9-2build1
fixed in 4.9-2ubuntu0.24.04.1
0.1%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2024-2236NONE0
libgcrypt20
1.10.3-2build1
No fix yet
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-31790NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42770NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Not Applicable
CVE-2026-9076NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Not Applicable
CVE-2026-7383NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2025-14831NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42015NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Not Applicable
CVE-2026-34743NONE0
liblzma5
5.6.1+really5.4.5-1ubuntu0.2
fixed in 5.6.1+really5.4.5-1ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42766NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Not Applicable
CVE-2026-42767NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-34180NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libblkid1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libmount1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libsmartcols1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libuuid1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9820NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-3832NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Not Applicable
CVE-2026-5419NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Not Applicable
CVE-2026-45446NONE0
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libsystemd0
255.4-1ubuntu8.12
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libudev1
255.4-1ubuntu8.12
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-2219NONE0
dpkg
1.22.6ubuntu6.5
fixed in 1.22.6ubuntu6.6
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.