Last scanned:
··This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who reaches the CrateDB HTTP API on the exposed ports could send crafted JSON via CVE-2026-89407 to tie up request threads, stalling the database and making it unavailable. The most likely consequence is loss of availability rather than data theft or code execution, and the scan lists no known exploitation for these findings. Note: CVE-2026-89425 only matters if JSON is parsed from a DataInput source, so confirm whether that input path is enabled in this deployment.
Hardening plan for this image · 4 steps
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-89407 | HIGH7.5 | com.fasterxml.jackson.core:jackson-core 2.22.2 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly ExposedContext importance: HIGH |
| CVE-2026-89425 | MEDIUM6 | com.fasterxml.jackson.core:jackson-core 2.22.2 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-6791 | MEDIUM5.9 | glibc 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-63073 | MEDIUM5.9 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-16730 | MEDIUM5.5 | dbus-broker 36-5.el10 fixed in 36-5.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-8674 | MEDIUM5.3 | glibc 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8674 | MEDIUM5.3 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8674 | MEDIUM5.3 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-63387 | MEDIUM5.16 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-63388 | MEDIUM5.04 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM4.92 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM4.92 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-145.el10_2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19445 | MEDIUM4.86 | python3-libs 3.12.14-1.el10 fixed in 3.12.15-1.el10_2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM4.68 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM4.68 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-11822 | MEDIUM4.68 | sqlite-libs 3.46.1-6.el10 fixed in 3.46.1-6.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11824 | MEDIUM4.68 | sqlite-libs 3.46.1-6.el10 fixed in 3.46.1-6.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-63382 | MEDIUM4.62 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-63385 | MEDIUM4.62 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-103111 | MEDIUM4.56 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM4.56 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-63383 | MEDIUM4.5 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-63384 | MEDIUM4.5 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-14456 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-14457 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-18798 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2026-54874 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63075 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63076 | MEDIUM4.5 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-91776 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.22.2 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91777 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.22.2 fixed in 2.21.7, 2.18.11, 2.22.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-54284 | MEDIUM4.5 | sqlparse 0.5.5 fixed in 0.6.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59893 | MEDIUM4.5 | sqlparse 0.5.5 fixed in 0.6.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-71491 | MEDIUM4.5 | sqlparse 0.5.5 fixed in 0.6.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM4.44 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM4.44 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19553 | MEDIUM4.44 | python3-libs 3.12.14-1.el10 fixed in 3.12.15-1.el10_2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-11940 | MEDIUM4.38 | python3-libs 3.12.14-1.el10 fixed in 3.12.14-1.el10_2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-41989 | MEDIUM4.14 | libgcrypt 1.11.0-7.el10 fixed in 1.11.0-7.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM4.14 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-1.el10_2.alma.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | MEDIUM4.14 | openssl-libs 1:3.5.8-1.el10.alma.1 fixed in 1:3.5.8-2.el10_2.alma.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-114406 | MEDIUM4.08 | ca-certificates 2026.2.90_v9.0.316-100.0.el10 fixed in 2026.2.92_v9.0.319-100.3.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM4.08 | glibc 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM4.08 | glibc-common 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM4.08 | glibc-minimal-langpack 2.39-141.el10.alma.1 fixed in 2.39-142.el10_2.alma.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-63381 | LOW3.96 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-63379 | LOW3.9 | libevent 2.1.13-1.el10 fixed in 2.1.13-1.el10_2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | LOW3.9 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | LOW3.9 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | LOW3.9 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | LOW3.9 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-15028 | LOW3.9 | libarchive 3.7.7-11.el10 fixed in 3.7.7-11.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-13151 | LOW3.9 | libtasn1 4.20.0-5.el10 fixed in 4.20.0-5.el10_2 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-13757 | LOW3.72 | p11-kit 0.26.4-1.el10 fixed in 0.26.4-1.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | LOW3.72 | p11-kit-trust 0.26.4-1.el10 fixed in 0.26.4-1.el10_2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84305 | LOW3.72 | sqlparse 0.5.5 fixed in 0.6.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | LOW3.54 | pcre2 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | LOW3.54 | pcre2-syntax 10.44-1.4.el10 fixed in 10.44-1.5.el10_2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-5704 | LOW3.3 | tar 2:1.35-13.el10 fixed in 2:1.35-13.el10_2 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-59894 | LOW3.18 | sqlparse 0.5.5 fixed in 0.6.0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19445 | LOW2.92 | python3 3.12.14-1.el10 fixed in 3.12.15-1.el10_2 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-16517 | LOW2.9 | libarchive 3.7.7-11.el10 fixed in 3.7.7-11.el10_2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-41991 | LOW2.82 | gzip 1.13-4.el10 fixed in 1.13-4.el10_2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19553 | LOW2.66 | python3 3.12.14-1.el10 fixed in 3.12.15-1.el10_2 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-18477 | LOW2.64 | tar 2:1.35-13.el10 fixed in 2:1.35-13.el10_2 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-18508 | LOW2.64 | tar 2:1.35-13.el10 fixed in 2:1.35-13.el10_2 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-11940 | LOW2.63 | python3 3.12.14-1.el10 fixed in 3.12.14-1.el10_2 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-4878 | LOW2.52 | libcap 2.69-7.el10 fixed in 2.69-7.el10_2.1 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-41992 | LOW2.48 | gzip 1.13-4.el10 fixed in 1.13-4.el10_2 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.48 | ncurses-base 6.4-15.20240127.el10 fixed in 6.4-15.20240127.el10_1 | 0.5% Theoretical Threat | Post-Exploit |
Want to check another image? Run a full scan with the Docker Security Scanner.