Vulnerability Reportconfluentinc/cp-kafka:latest

confluentinc/cp-kafka:latestconfluentinc/cp-kafka:latest-ubi9confluentinc/cp-kafka:8.3.0confluentinc/cp-kafka:8.3.0-1-ubi9
digestsha256:c2cedb691aec9963114fb0b4e45fa49a47bb374a89c241c4ecb68a5fc904e5e3

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit these to cause denial of service, or in the case of CVE-2026-58015, exfiltrate sensitive files from the container filesystem. Patching the underlying packages to their fixed versions would fully address these vulnerabilities. The image is from a reputable source and pinned by digest, which helps ensure integrity.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

180 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-58011MEDIUM6.38
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-58015MEDIUM6.38
glib2
2.68.4-19.el9_8.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-32636MEDIUM6.38
glib2
2.68.4-19.el9_8.1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-41989MEDIUM6.38
libgcrypt
1.10.0-11.el9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6732MEDIUM6.38
libxml2
2.9.13-14.el9_7
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34183MEDIUM6.38
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-28389MEDIUM6.38
openssl-libs
1:3.5.5-3.el9_8
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-15308MEDIUM6.38
python3-libs
3.9.25-7.el9_8
fixed in 3.9.25-7.el9_8.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-3644MEDIUM6.38
python3-libs
3.9.25-7.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4224MEDIUM6.38
python3-libs
3.9.25-7.el9_8
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-7210MEDIUM6.38
python3-libs
3.9.25-7.el9_8
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl
2.3.1-4.el9
fixed in 2.4.0-1.el9_8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM6
openssl-libs
1:3.5.5-3.el9_8
No fix yet
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-13151MEDIUM5.9
libtasn1
4.16.0-9.el9
fixed in 4.16.0-10.el9_8
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-41996MEDIUM5.9
openssl-libs
1:3.5.5-3.el9_8
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-56132MEDIUM5.87
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56403MEDIUM5.87
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56405MEDIUM5.87
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56406MEDIUM5.87
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4105MEDIUM5.7
systemd-libs
252-67.el9_8.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2021-3572MEDIUM5.7
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-6238MEDIUM5.52
glibc
2.34-270.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
glibc-common
2.34-270.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
glibc-minimal-langpack
2.34-270.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-45322MEDIUM5.52
libxml2
2.9.13-14.el9_7
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-2673MEDIUM5.52
openssl-fips-provider
3.0.7-8.el9
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-2673MEDIUM5.52
openssl-fips-provider-so
3.0.7-8.el9
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-2673MEDIUM5.52
openssl-libs
1:3.5.5-3.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11972MEDIUM5.52
python3-libs
3.9.25-7.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54518MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM5.5
openssl-libs
1:3.5.5-3.el9_8
No fix yet
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2024-34459MEDIUM5.5
libxml2
2.9.13-14.el9_7
fixed in 2.9.13-14.el9_8.1
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl
2.3.1-4.el9
fixed in 2.4.0-1.el9_8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr
2.5.1-3.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-34181MEDIUM5.35
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42768MEDIUM5.35
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-15588MEDIUM5.3
glib2
2.68.4-19.el9_8.1
No fix yet
—
Directly Exposed
CVE-2026-1757MEDIUM5.27
libxml2
2.9.13-14.el9_7
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
p11-kit
0.26.2-1.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
p11-kit-trust
0.26.2-1.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-64506MEDIUM5.18
libpng
2:1.6.37-15.el9_8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6019MEDIUM5.18
python3-libs
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-50181MEDIUM5.18
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-50182MEDIUM5.18
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5713MEDIUM5.1
python3-libs
3.9.25-7.el9_8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-50219MEDIUM5.02
expat
2.5.0-6.el9_8.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56412MEDIUM5.02
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
glibc
2.34-270.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
glibc-common
2.34-270.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
glibc-minimal-langpack
2.34-270.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-0990MEDIUM5.02
libxml2
2.9.13-14.el9_7
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-31790MEDIUM5.02
openssl-fips-provider
3.0.7-8.el9
fixed in 3.0.7-11.el9_8
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-31790MEDIUM5.02
openssl-fips-provider-so
3.0.7-8.el9
fixed in 3.0.7-11.el9_8
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42764MEDIUM5.02
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42769MEDIUM5.02
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-32284MEDIUM5.02
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-31789MEDIUM5
openssl-libs
1:3.5.5-3.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-32776MEDIUM4.67
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-32777MEDIUM4.67
expat
2.5.0-6.el9_8.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-32778MEDIUM4.67
expat
2.5.0-6.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-66382MEDIUM4.67
expat
2.5.0-6.el9_8.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2021-46195MEDIUM4.67
libgcc
11.5.0-14.el9
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc
11.5.0-14.el9
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2021-46195MEDIUM4.67
libstdc++
11.5.0-14.el9
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++
11.5.0-14.el9
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-13837MEDIUM4.67
python3-libs
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42308MEDIUM4.67
python3-libs
3.9.25-7.el9_8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-25645MEDIUM4.67
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-0232MEDIUM4.67
sqlite-libs
3.34.1-10.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib
1.2.11-40.el9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-1489MEDIUM4.59
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-23865MEDIUM4.5
freetype
2.10.4-10.el9_5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-22693MEDIUM4.5
harfbuzz
2.7.4-10.el9
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid
2.37.4-25.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount
2.37.4-25.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid
2.37.4-25.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-12781MEDIUM4.5
python3-libs
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-3276MEDIUM4.5
python3-libs
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-45409MEDIUM4.5
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
xz-libs
5.2.5-8.el9_0
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54516MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4, 3.1.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54517MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4516MEDIUM4.33
python3-libs
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
bzip2-libs
1.0.8-11.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
glibc
2.34-270.el9_8
fixed in 2.34-272.el9_8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
glibc
2.34-270.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
glibc-common
2.34-270.el9_8
fixed in 2.34-272.el9_8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
glibc-common
2.34-270.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
glibc-minimal-langpack
2.34-270.el9_8
fixed in 2.34-272.el9_8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
glibc-minimal-langpack
2.34-270.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-28164MEDIUM4.25
libpng
2:1.6.37-15.el9_8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM4.25
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-15282MEDIUM4.08
python3-libs
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-0672MEDIUM4.08
python3-libs
3.9.25-7.el9_8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid
2.37.4-25.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount
2.37.4-25.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid
2.37.4-25.el9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
openssl-libs
1:3.5.5-3.el9_8
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-11468LOW3.82
python3-libs
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-1502LOW3.82
python3-libs
3.9.25-7.el9_8
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-64505LOW3.74
libpng
2:1.6.37-15.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-34757LOW3.74
libpng
2:1.6.37-15.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-25068LOW3.65
alsa-lib
1.2.15.3-1.el9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-1484LOW3.57
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-45803LOW3.57
python3-pip-wheel
21.3.1-2.el9_8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5958LOW3.21
sed
4.8-10.el9
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41080LOW3.15
expat
2.5.0-6.el9_8.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-3360LOW3.15
glib2
2.68.4-19.el9_8.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-7039LOW3.15
glib2
2.68.4-19.el9_8.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0988LOW3.15
glib2
2.68.4-19.el9_8.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0989LOW3.15
libxml2
2.9.13-14.el9_7
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-9232LOW3.1
openssl-libs
1:3.5.5-3.el9_8
No fix yet
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-5713LOW3.06
python3
3.9.25-7.el9_8
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-6653LOW3
libxml2
2.9.13-14.el9_7
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-13837LOW2.8
python3
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42308LOW2.8
python3
3.9.25-7.el9_8
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41990LOW2.8
libgcrypt
1.10.0-11.el9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-13462LOW2.8
python3-libs
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-2297LOW2.8
python3-libs
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3479LOW2.8
python3-libs
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-70873LOW2.8
sqlite-libs
3.34.1-10.el9_8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-58016LOW2.78
glib2
2.68.4-19.el9_8.1
fixed in 2.68.4-19.el9_8.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl-libs
1:3.5.5-3.el9_8
fixed in 1:3.5.5-4.el9_8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-33416LOW2.7
libpng
2:1.6.37-15.el9_8
fixed in 2:1.6.37-15.el9_8.2
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-27113LOW2.7
libxml2
2.9.13-14.el9_7
No fix yet
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-12781LOW2.7
python3
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-3276LOW2.7
python3
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-58014LOW2.63
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-1795LOW2.63
python3-libs
3.9.25-7.el9_8
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-4516LOW2.6
python3
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-16118LOW2.56
glib2
2.68.4-19.el9_8.1
No fix yet
—
Post-Exploit
CVE-2026-58010LOW2.51
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-58012LOW2.51
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-58013LOW2.51
glib2
2.68.4-19.el9_8.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-54512LOW2.48
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-54513LOW2.48
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-0992LOW2.46
libxml2
2.9.13-14.el9_7
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15282LOW2.45
python3
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0672LOW2.45
python3
3.9.25-7.el9_8
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-11979LOW2.39
libxml2
2.9.13-14.el9_7
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-1485LOW2.38
glib2
2.68.4-19.el9_8.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-33636LOW2.33
libpng
2:1.6.37-15.el9_8
fixed in 2:1.6.37-15.el9_8.2
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-41409LOW2.29
pcre2
10.40-6.el9
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2022-41409LOW2.29
pcre2-syntax
10.40-6.el9
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-15308LOW2.29
python3
3.9.25-7.el9_8
fixed in 3.9.25-7.el9_8.2
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3644LOW2.29
python3
3.9.25-7.el9_8
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-4224LOW2.29
python3
3.9.25-7.el9_8
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-7210LOW2.29
python3
3.9.25-7.el9_8
No fix yet
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-11468LOW2.29
python3
3.9.25-7.el9_8
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-1502LOW2.29
python3
3.9.25-7.el9_8
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
8.32-40.el9
fixed in 8.32-41.el9_8
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-24515LOW2.12
expat
2.5.0-6.el9_8.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6170LOW2.12
libxml2
2.9.13-14.el9_7
fixed in 2.9.13-14.el9_8.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-11972LOW1.99
python3
3.9.25-7.el9_8
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6019LOW1.87
python3
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-13462LOW1.68
python3
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-2297LOW1.68
python3
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3479LOW1.68
python3
3.9.25-7.el9_8
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-1795LOW1.58
python3
3.9.25-7.el9_8
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-39822NONE0
stdlib
v1.26.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.2-12.20210508.el9
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-libs
6.2-12.20210508.el9
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.26.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-22020NONE0
libpng
2:1.6.37-15.el9_8
No fix yet
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.21.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
CVE-2026-59888NONE0
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4
—
Not Applicable
CVE-2026-59889NONE0
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.5, 2.18.9, 2.22.1
—
Not Applicable
GHSA-mhm7-754m-9p8wNONE0
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.9, 2.21.5
—
Not Applicable
CVE-2026-56740NONE0
org.jline:jline-remote-telnet
3.30.4
fixed in 4.2.1
—
Not Applicable
CVE-2026-56741NONE0
org.jline:jline-remote-telnet
3.30.4
fixed in 4.2.1
—
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.