Vulnerability Reportapache/apisix:3.19.0-debian

apache/apisix:3.19.0-debian
digestsha256:9a7e45dc943fbf10ec916d1232bae4cda9302ae28a4696cfb83c2da01d261141

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit CVE-2023-2953 or CVE-2019-9192 to cause denial-of-service in the API gateway or its supporting libraries, disrupting service availability. The systemd-homed local privilege-escalation issue is only relevant if homed is enabled and an attacker already has local access, so disabling homed would fully eliminate that specific risk. Despite strong trust signals such as a pinned digest and a popular Apache publisher, the exposed vulnerabilities remain a concern for production use.

Vulnerabilities

Vulnerability Log

294 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2019-9192HIGH7.5
libc6
2.36-9+deb12u14
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-2953HIGH7.5
libldap-2.5-0
2.5.13+dfsg-5
No fix yet
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-2953HIGH7.5
libldap-dev
2.5.13+dfsg-5
No fix yet
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-2953HIGH7.5
libldap2-dev
2.5.13+dfsg-5
No fix yet
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-16742HIGH7.48
libsystemd0
252.39-1~deb12u2
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-16742HIGH7.48
libudev1
252.39-1~deb12u2
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-74860HIGH7.22
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6653MEDIUM6.66
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-76642MEDIUM6.63
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-86138MEDIUM6.63
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-86140MEDIUM6.63
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-86142MEDIUM6.63
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-86144MEDIUM6.63
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-11979MEDIUM6.63
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-95619MEDIUM6.54
libgcc-s1
12.2.0-14+deb12u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-95619MEDIUM6.54
libstdc++6
12.2.0-14+deb12u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-103111MEDIUM6.46
libpcre2-8-0
10.42-1+deb12u1
fixed in 10.42-1+deb12u2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl3
3.0.22-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-86143MEDIUM6.21
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.3.1-3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-20838MEDIUM6
libpcre3
2:8.39-15
No fix yet
2.8%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-53613MEDIUM5.95
libblkid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-86805MEDIUM5.95
libc-bin
2.36-9+deb12u14
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-95818MEDIUM5.95
libc-bin
2.36-9+deb12u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-86805MEDIUM5.95
libc6
2.36-9+deb12u14
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-95818MEDIUM5.95
libc6
2.36-9+deb12u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-102010MEDIUM5.95
libgcc-s1
12.2.0-14+deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libmount1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-102010MEDIUM5.95
libstdc++6
12.2.0-14+deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libuuid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.1-3+deb12u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.19.0-2+deb12u1
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc-bin
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-22185MEDIUM5.78
libldap-2.5-0
2.5.13+dfsg-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22185MEDIUM5.78
libldap-dev
2.5.13+dfsg-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22185MEDIUM5.78
libldap2-dev
2.5.13+dfsg-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.9-2+deb12u7
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.3.1-3
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.1-4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.36-9+deb12u14
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.36-9+deb12u14
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2015-9019MEDIUM5.3
libxslt1.1
1.1.35-1+deb12u4
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.24.1-2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM5.27
libp11-kit0
0.24.1-2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc-bin
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc-bin
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl3
3.0.22-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl3
3.0.22-1~deb12u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3
3.0.22-1~deb12u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.36-9+deb12u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.36-9+deb12u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.2.0-14+deb12u1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2017-16231MEDIUM4.67
libpcre3
2:8.39-15
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.2.0-14+deb12u1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libsystemd0
252.39-1~deb12u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libudev1
252.39-1~deb12u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-76781MEDIUM4.67
libxml2
2.9.14+dfsg-1.3~deb12u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-10911MEDIUM4.67
libxslt1.1
1.1.35-1+deb12u4
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.13.dfsg-1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-8674MEDIUM4.5
libc-bin
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-8674MEDIUM4.5
libc6
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3
3.0.22-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5+b1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.36-9+deb12u14
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.36-9+deb12u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.36-9+deb12u14
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.36-9+deb12u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2020-15719MEDIUM4.2
libldap-2.5-0
2.5.13+dfsg-5
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-15719MEDIUM4.2
libldap-dev
2.5.13+dfsg-5
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-15719MEDIUM4.2
libldap2-dev
2.5.13+dfsg-5
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.36-9+deb12u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.36-9+deb12u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM4.03
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78408MEDIUM4.03
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78408MEDIUM4.03
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78408MEDIUM4.03
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2017-14159MEDIUM4
libldap-2.5-0
2.5.13+dfsg-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2017-14159MEDIUM4
libldap-dev
2.5.13+dfsg-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2017-14159MEDIUM4
libldap2-dev
2.5.13+dfsg-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.36-9+deb12u14
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.36-9+deb12u14
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-76642LOW3.98
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW3.98
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW3.98
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW3.98
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.12-1
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW3.77
openssl
3.0.22-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.6.1
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1.2+deb12u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-53613LOW3.57
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
mount
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-19542LOW3.57
libc-bin
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc-bin
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.13.dfsg-1
No fix yet
3.4%
Low-Moderate Risk
Post-Exploit
CVE-2016-2781LOW3.31
coreutils
9.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.4%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.36-9+deb12u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.36-9+deb12u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-97399LOW3.15
libc-bin
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-97399LOW3.15
libc6
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.15
libssl3
3.0.22-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-14104LOW3.11
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
9.1-1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW3.11
coreutils
9.1-1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-54872LOW3.01
openssl
3.0.22-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW3.01
openssl
3.0.22-1~deb12u1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW3.01
openssl
3.0.22-1~deb12u1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.36.0-7+deb12u3
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2026-15534LOW2.91
perl-base
5.36.0-7+deb12u3
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2017-7245LOW2.81
libpcre3
2:8.39-15
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2017-7246LOW2.81
libpcre3
2:8.39-15
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1.2+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2013-4392LOW2.8
libsystemd0
252.39-1~deb12u2
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
252.39-1~deb12u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
252.39-1~deb12u2
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
252.39-1~deb12u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.36-9+deb12u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc-bin
2.36-9+deb12u14
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.36-9+deb12u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.10.1-3+deb12u1
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2015-3276LOW2.7
libldap-2.5-0
2.5.13+dfsg-5
No fix yet
5.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-17740LOW2.7
libldap-2.5-0
2.5.13+dfsg-5
No fix yet
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2015-3276LOW2.7
libldap-dev
2.5.13+dfsg-5
No fix yet
5.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-17740LOW2.7
libldap-dev
2.5.13+dfsg-5
No fix yet
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2015-3276LOW2.7
libldap2-dev
2.5.13+dfsg-5
No fix yet
5.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-17740LOW2.7
libldap2-dev
2.5.13+dfsg-5
No fix yet
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2017-11164LOW2.7
libpcre3
2:8.39-15
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53910LOW2.7
diffutils
1:3.8-4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.7
openssl
3.0.22-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-11731LOW2.63
libxslt1.1
1.1.35-1+deb12u4
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-57432LOW2.57
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.6%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.13+dfsg1-1+deb12u2
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
9.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.34+dfsg-1.2+deb12u1
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.34+dfsg-1.2+deb12u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.6.1
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.22-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-1+deb12u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.36.0-7+deb12u3
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libtinfo6
6.4-4
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4-4
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4-4
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-95619NONE0
gcc-12-base
12.2.0-14+deb12u1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-102010NONE0
gcc-12-base
12.2.0-14+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.4-4
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.4-4
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.4-4
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2022-27943NONE0
gcc-12-base
12.2.0-14+deb12u1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2007-5686NONE0
login
1:4.13+dfsg1-1+deb12u2
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.2-6+deb12u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.2-6+deb12u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.2-6+deb12u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.2-6+deb12u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules-bin
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-runtime
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam0g
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-105712NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-1+deb12u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.2.15-2+b13
No fix yet
—
Not Applicable
CVE-2026-67693NONE0
libgnutls30
3.7.9-2+deb12u7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88647NONE0
libgnutls30
3.7.9-2+deb12u7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88648NONE0
libgnutls30
3.7.9-2+deb12u7
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30
3.7.9-2+deb12u7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30
3.7.9-2+deb12u7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30
3.7.9-2+deb12u7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-107161NONE0
libsasl2-2
2.1.28+dfsg-10
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-107161NONE0
libsasl2-modules-db
2.1.28+dfsg-10
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-27587NONE0
libssl3
3.0.22-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.13+dfsg1-1+deb12u2
No fix yet
—
Not Applicable
CVE-2025-27587NONE0
openssl
3.0.22-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.13+dfsg1-1+deb12u2
No fix yet
—
Not Applicable
CVE-2026-7010NONE0
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.36.0-7+deb12u3
fixed in 5.36.0-7+deb12u4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-82560NONE0
perl-base
5.36.0-7+deb12u3
No fix yet
0.6%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
3.06-4
No fix yet
—
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1.2+deb12u1
No fix yet
—
Not Applicable
DLA-4792-1NONE0
tzdata
2026b-0+deb12u1
fixed in 2026c-0+deb12u1
—
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.2.13.dfsg-1
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.