Last scanned:
This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who can reach the trace agent port could crash the agent or exhaust its memory, and where CRL checking is enabled, crafted certificates could leak process memory. Most of the serious findings are denial-of-service flaws in the Go standard library, and CVE-2025-61726 is reachable by anyone who can send requests to port 8126. CVE-2023-0286 only matters if CRL checking is turned on, so confirm that setting before deciding. Upgrading the affected Go and Python packages is the main remedy, and the publisher's TRUSTED reputation does not offset these findings.
Hardening plan for this image · 5 steps
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2023-0286 | HIGH7.7 | cryptography 3.3.2 fixed in 39.0.1 | 69.3% Actively Exploited | Directly ExposedContext importance: MEDIUM |
| CVE-2025-61726 | HIGH7.5 | stdlib v1.21.11 fixed in 1.24.12, 1.25.6 | 2.3% Low-Moderate Risk | Directly ExposedContext importance: HIGH |
| CVE-2026-42504 | HIGH7.5 | stdlib v1.21.11 fixed in 1.25.11, 1.26.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-56853 | HIGH7.5 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-56859 | HIGH7.5 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-56860 | HIGH7.5 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-56862 | HIGH7.5 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-78667 | HIGH7.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-78669 | HIGH7.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-97031 | HIGH7.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-61728 | HIGH7.5 | stdlib v1.21.11 fixed in 1.24.12, 1.25.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-78659 | HIGH7.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-78660 | HIGH7.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-94440 | HIGH7.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| GHSA-6q48-6c7w-9gw2 | HIGH7.28 | certifi 2021.10.8 fixed in 2026.10.18 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-24051 | HIGH7 | go.opentelemetry.io/otel/sdk v1.23.1 fixed in 1.40.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39883 | HIGH7 | go.opentelemetry.io/otel/sdk v1.23.1 fixed in 1.43.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-88647 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-88648 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-3445 | MEDIUM6.88 | github.com/mholt/archiver/v3 v3.5.1 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-46569 | MEDIUM6.88 | github.com/open-policy-agent/opa v0.62.0 fixed in 1.4.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-49265 | MEDIUM6.8 | oauthlib 3.1.0 fixed in 4.0.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-85747 | MEDIUM6.8 | github.com/docker/distribution v2.8.3+incompatible No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-111943 | MEDIUM6.8 | stdlib v1.21.11 fixed in 1.26.10, 1.27.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2023-37920 | MEDIUM6.66 | certifi 2021.10.8 fixed in 2023.7.22 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2024-0406 | MEDIUM6.63 | github.com/mholt/archiver/v3 v3.5.1 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | MEDIUM6.5 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | MEDIUM6.5 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-2303 | MEDIUM6.5 | go.mongodb.org/mongo-driver v1.13.1 fixed in 1.17.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-61727 | MEDIUM6.5 | stdlib v1.21.11 fixed in 1.24.11, 1.25.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39825 | MEDIUM6.5 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56866 | MEDIUM6.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-94439 | MEDIUM6.5 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-97687 | MEDIUM6.48 | urllib3 1.26.20 fixed in 2.8.0 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-32282 | MEDIUM6.4 | stdlib v1.21.11 fixed in 1.25.9, 1.26.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-22868 | MEDIUM6.38 | golang.org/x/oauth2 v0.18.0 fixed in 0.27.0 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2025-58183 | MEDIUM6.38 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-58188 | MEDIUM6.38 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-8260 | MEDIUM6.21 | github.com/open-policy-agent/opa v0.62.0 fixed in 0.68.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-22871 | MEDIUM6.18 | stdlib v1.21.11 fixed in 1.23.8, 1.24.2 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-49264 | MEDIUM6.1 | oauthlib 3.1.0 fixed in 4.0.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2023-32681 | MEDIUM6.1 | requests 2.27.1 fixed in 2.31.0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-32289 | MEDIUM6.1 | stdlib v1.21.11 fixed in 1.25.9, 1.26.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-94448 | MEDIUM6.1 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-97030 | MEDIUM6.1 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68121 | MEDIUM6 | stdlib v1.21.11 fixed in 1.24.13, 1.25.7, 1.26.0-rc.3 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2024-39689 | MEDIUM6 | certifi 2021.10.8 fixed in 2024.7.4 | 1.0% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2023-50782 | MEDIUM6 | cryptography 3.3.2 fixed in 42.0.0 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| GHSA-537c-gmf6-5ccf | MEDIUM6 | cryptography 3.3.2 fixed in 48.0.1 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-30922 | MEDIUM6 | pyasn1 0.4.6 fixed in 0.6.3 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59884 | MEDIUM6 | pyasn1 0.4.6 fixed in 0.6.4 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59885 | MEDIUM6 | pyasn1 0.4.6 fixed in 0.6.4 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59886 | MEDIUM6 | pyasn1 0.4.6 fixed in 0.6.4 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-66418 | MEDIUM6 | urllib3 1.26.20 fixed in 2.6.0 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-66471 | MEDIUM6 | urllib3 1.26.20 fixed in 2.6.0 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-21441 | MEDIUM6 | urllib3 1.26.20 fixed in 2.6.3 | 2.9% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-97689 | MEDIUM6 | urllib3 1.26.20 fixed in 2.8.0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-32285 | MEDIUM6 | github.com/buger/jsonparser v1.1.1 fixed in 1.1.2 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-87m9-rv8p-rgmg | MEDIUM6 | github.com/mostynb/go-grpc-compression v1.2.2 fixed in 1.2.3 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2024-36129 | MEDIUM6 | go.opentelemetry.io/collector/config/configgrpc v0.91.0 fixed in 0.102.1 | 1.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2024-36129 | MEDIUM6 | go.opentelemetry.io/collector/config/confighttp v0.91.0 fixed in 0.102.0 | 1.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2024-34156 | MEDIUM6 | stdlib v1.21.11 fixed in 1.22.7, 1.23.1 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-25679 | MEDIUM6 | stdlib v1.21.11 fixed in 1.25.8, 1.26.1 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-32283 | MEDIUM6 | stdlib v1.21.11 fixed in 1.25.9, 1.26.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-47907 | MEDIUM5.95 | stdlib v1.21.11 fixed in 1.23.12, 1.24.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-67693 | MEDIUM5.9 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | MEDIUM5.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2023-29483 | MEDIUM5.9 | dnspython 1.16.0 fixed in 2.6.1 | 1.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-25658 | MEDIUM5.9 | rsa 4.5 fixed in 4.7 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2024-24791 | MEDIUM5.9 | stdlib v1.21.11 fixed in 1.21.12, 1.22.5 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2024-34158 | MEDIUM5.9 | stdlib v1.21.11 fixed in 1.22.7, 1.23.1 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-97032 | MEDIUM5.9 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-4673 | MEDIUM5.78 | stdlib v1.21.11 fixed in 1.23.10, 1.24.4 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-45570 | MEDIUM5.76 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.19.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-11579 | MEDIUM5.52 | github.com/nwaples/rardecode v1.1.0 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-47906 | MEDIUM5.52 | stdlib v1.21.11 fixed in 1.23.12, 1.24.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-25645 | MEDIUM5.5 | requests 2.27.1 fixed in 2.33.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-10722 | MEDIUM5.5 | github.com/cilium/ebpf v0.13.3-0.20240314165416-06282fb6ba65 fixed in 0.22.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-61801 | MEDIUM5.5 | github.com/moby/sys/user v0.1.0 fixed in 0.4.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-32288 | MEDIUM5.5 | stdlib v1.21.11 fixed in 1.25.9, 1.26.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-102268 | MEDIUM5.46 | PyJWT 1.7.1 fixed in 2.14.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-102267 | MEDIUM5.46 | PyJWT 1.7.1 fixed in 2.14.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-33186 | MEDIUM5.46 | google.golang.org/grpc v1.62.1 fixed in 1.79.3 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-27142 | MEDIUM5.4 | stdlib v1.21.11 fixed in 1.25.8, 1.26.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-39823 | MEDIUM5.4 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39826 | MEDIUM5.4 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-95184 | MEDIUM5.3 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39882 | MEDIUM5.3 | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 fixed in 1.43.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39882 | MEDIUM5.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.23.1 fixed in 1.43.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-22873 | MEDIUM5.3 | stdlib v1.21.11 fixed in 1.23.9, 1.24.3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-61730 | MEDIUM5.3 | stdlib v1.21.11 fixed in 1.24.12, 1.25.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42505 | MEDIUM5.3 | stdlib v1.21.11 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42507 | MEDIUM5.3 | stdlib v1.21.11 fixed in 1.25.11, 1.26.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-78663 | MEDIUM5.3 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-6345 | MEDIUM5.28 | setuptools 40.9.0.post20261022 fixed in 70.0.0 | 1.9% Low-Moderate Risk | Directly Exposed |
| CVE-2025-47273 | MEDIUM5.28 | setuptools 40.9.0.post20261022 fixed in 78.1.1 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-53488 | MEDIUM5.28 | github.com/containerd/containerd v1.7.13 fixed in 1.7.33 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39828 | MEDIUM5.28 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56865 | MEDIUM5.28 | golang.org/x/mod v0.19.0 fixed in 0.40.0 | 0.1% Theoretical Threat | Directly Exposed |
| GHSA-hrxh-6v49-42gf | MEDIUM5.28 | google.golang.org/grpc v1.62.1 fixed in 1.82.1 | — | Directly Exposed |
| CVE-2024-5569 | MEDIUM5.27 | zipp 1.2.0 fixed in 3.19.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39832 | MEDIUM5.22 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-26007 | MEDIUM5.2 | cryptography 3.3.2 fixed in 46.0.5 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2023-23931 | MEDIUM5.2 | cryptography 3.3.2 fixed in 39.0.1 | 1.3% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2022-23491 | MEDIUM5.1 | certifi 2021.10.8 fixed in 2022.12.07 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2023-49083 | MEDIUM5.1 | cryptography 3.3.2 fixed in 41.0.6 | 1.0% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-81869 | MEDIUM5.1 | go.opentelemetry.io/otel/sdk v1.23.1 fixed in 1.33.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2024-34155 | MEDIUM5.02 | stdlib v1.21.11 fixed in 1.22.7, 1.23.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2024-45336 | MEDIUM5.02 | stdlib v1.21.11 fixed in 1.22.11, 1.23.5, 1.24.0-rc.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2024-36039 | MEDIUM5 | PyMySQL 0.10.1 fixed in 1.1.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-95209 | MEDIUM5 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-95210 | MEDIUM5 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-85091 | MEDIUM5 | zlib1g 1:1.3.dfsg-3.1ubuntu2.2 fixed in 1:1.3.dfsg-3.1ubuntu2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-39821 | MEDIUM4.92 | golang.org/x/net v0.33.0 fixed in 0.55.0 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc-bin 2.39-0ubuntu8.9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc6 2.39-0ubuntu8.9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-33997 | MEDIUM4.86 | github.com/docker/docker v25.0.7+incompatible fixed in 29.3.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44973 | MEDIUM4.86 | github.com/go-git/go-billy/v5 v5.6.0 fixed in 5.9.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39831 | MEDIUM4.86 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-56864 | MEDIUM4.86 | golang.org/x/mod v0.19.0 fixed in 0.40.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-25681 | MEDIUM4.86 | golang.org/x/net v0.33.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27136 | MEDIUM4.86 | golang.org/x/net v0.33.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-15558 | MEDIUM4.8 | github.com/docker/cli v25.0.5+incompatible fixed in 29.2.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2024-35195 | MEDIUM4.76 | requests 2.27.1 fixed in 2.32.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2024-25621 | MEDIUM4.68 | github.com/containerd/containerd v1.7.13 fixed in 1.7.29 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-0913 | MEDIUM4.67 | stdlib v1.21.11 fixed in 1.23.10, 1.24.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2023-48795 | MEDIUM4.6 | paramiko 2.12.0 fixed in 3.4.0 | 93.5% Actively Exploited | Directly Exposed |
| CVE-2022-29217 | MEDIUM4.5 | PyJWT 1.7.1 fixed in 2.4.0 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-32597 | MEDIUM4.5 | PyJWT 1.7.1 fixed in 2.12.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-101917 | MEDIUM4.5 | PyJWT 1.7.1 fixed in 2.14.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2022-1941 | MEDIUM4.5 | protobuf 3.17.3 fixed in 3.18.3, 3.19.5, 3.20.2, 4.21.6 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2026-0994 | MEDIUM4.5 | protobuf 3.17.3 fixed in 6.33.5, 5.29.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-45022 | MEDIUM4.5 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.19.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-48702 | MEDIUM4.5 | github.com/sigstore/rekor v1.2.2 fixed in 1.5.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-47913 | MEDIUM4.5 | golang.org/x/crypto v0.31.0 fixed in 0.43.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-39829 | MEDIUM4.5 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-39830 | MEDIUM4.5 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-39835 | MEDIUM4.5 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-46597 | MEDIUM4.5 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33814 | MEDIUM4.5 | golang.org/x/net v0.33.0 fixed in 0.53.0 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-46600 | MEDIUM4.5 | golang.org/x/net v0.33.0 fixed in 0.56.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-78669 | MEDIUM4.5 | golang.org/x/net v0.33.0 fixed in 0.60.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-78659 | MEDIUM4.5 | golang.org/x/net v0.33.0 fixed in 0.60.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-78660 | MEDIUM4.5 | golang.org/x/net v0.33.0 fixed in 0.60.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56852 | MEDIUM4.5 | golang.org/x/text v0.21.0 fixed in 0.39.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-84304 | MEDIUM4.5 | google.golang.org/grpc v1.62.1 fixed in 1.83.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-84445 | MEDIUM4.5 | google.golang.org/grpc v1.62.1 fixed in 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-61729 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.11, 1.25.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-27145 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.25.11, 1.26.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-32280 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.25.9, 1.26.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-32281 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.25.9, 1.26.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-33811 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-33814 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-33818 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-47081 | MEDIUM4.5 | requests 2.27.1 fixed in 2.32.4 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2025-47908 | MEDIUM4.5 | github.com/rs/cors v1.10.1 fixed in 1.11.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-58058 | MEDIUM4.5 | github.com/ulikunitz/xz v0.5.11 fixed in 0.5.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-22866 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.22.12, 1.23.6, 1.24.0-rc.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-47912 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-58185 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-58187 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.9, 1.25.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-58189 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-61723 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-61724 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-61725 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-58186 | MEDIUM4.5 | stdlib v1.21.11 fixed in 1.24.8, 1.25.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-69277 | MEDIUM4.5 | PyNaCl 1.4.0 fixed in 1.6.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-48526 | MEDIUM4.44 | PyJWT 1.7.1 fixed in 2.13.0 | 0.4% Theoretical Threat | Directly Exposed |
| GHSA-pxh4-856f-4h89 | MEDIUM4.44 | PyJWT 1.7.1 fixed in 2.14.0 | — | Directly Exposed |
| CVE-2026-41506 | MEDIUM4.44 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.18.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42508 | MEDIUM4.44 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 6.9% Low-Moderate Risk | Directly Exposed |
| CVE-2024-0727 | MEDIUM4.4 | cryptography 3.3.2 fixed in 42.0.2 | 3.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-41567 | MEDIUM4.32 | github.com/docker/docker v25.0.7+incompatible No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42306 | MEDIUM4.32 | github.com/docker/docker v25.0.7+incompatible No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-71556 | MEDIUM4.26 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.19.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-46595 | MEDIUM4.26 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-34073 | MEDIUM4.24 | cryptography 3.3.2 fixed in 46.0.6 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-44431 | MEDIUM4.24 | urllib3 1.26.20 fixed in 2.7.0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89092 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc6 2.39-0ubuntu8.9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-50181 | MEDIUM4.14 | urllib3 1.26.20 fixed in 2.5.0 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-pmwq-pjrm-6p5r | MEDIUM4.1 | github.com/in-toto/in-toto-golang v0.9.0 fixed in 0.11.0 | — | Directly Exposed |
| CVE-2026-56854 | MEDIUM4.08 | golang.org/x/crypto v0.31.0 fixed in 0.55.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-39824 | MEDIUM4 | golang.org/x/sys v0.28.0 fixed in 0.44.0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2024-40635 | LOW3.98 | github.com/containerd/containerd v1.7.13 fixed in 1.7.27, 1.6.38 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44740 | LOW3.9 | github.com/go-git/go-billy/v5 v5.6.0 fixed in 5.9.0 | 0.4% Theoretical Threat | Directly Exposed |
| GHSA-w5pp-99ch-qj29 | LOW3.9 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.19.1 | — | Directly Exposed |
| CVE-2026-39827 | LOW3.9 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39834 | LOW3.9 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-25680 | LOW3.9 | golang.org/x/net v0.33.0 fixed in 0.55.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-22869 | LOW3.83 | golang.org/x/crypto v0.31.0 fixed in 0.35.0 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-71557 | LOW3.78 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.19.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-84303 | LOW3.78 | google.golang.org/grpc v1.62.1 fixed in 1.83.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-22870 | LOW3.74 | stdlib v1.21.11 fixed in 1.23.7, 1.24.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-59890 | LOW3.66 | setuptools 40.9.0.post20261022 fixed in 83.0.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42502 | LOW3.66 | golang.org/x/net v0.33.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-41568 | LOW3.6 | github.com/docker/docker v25.0.7+incompatible No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2024-45341 | LOW3.57 | stdlib v1.21.11 fixed in 1.22.11, 1.23.5, 1.24.0-rc.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2022-40897 | LOW3.54 | setuptools 40.9.0.post20261022 fixed in 65.5.1 | 2.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-97032 | LOW3.54 | golang.org/x/net v0.33.0 fixed in 0.60.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-1229 | LOW3.53 | github.com/cloudflare/circl v1.3.7 fixed in 1.6.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-33747 | LOW3.53 | github.com/moby/buildkit v0.13.0 fixed in 0.28.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-6357 | LOW3.48 | pip 20.3.3 fixed in 26.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-22872 | LOW3.31 | golang.org/x/net v0.33.0 fixed in 0.38.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-29481 | LOW3.31 | libbpf1 1:1.3.0-2build2 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-1352 | LOW3.31 | libelf1t64 0.190-1.1ubuntu0.1 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-1376 | LOW3.31 | libelf1t64 0.190-1.1ubuntu0.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-102473 | LOW3.3 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-8643 | LOW3.3 | pip 20.3.3 fixed in 26.1.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-64329 | LOW3.3 | github.com/containerd/containerd v1.7.13 fixed in 1.7.29 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-47262 | LOW3.3 | github.com/containerd/containerd v1.7.13 fixed in 1.7.33 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-53495 | LOW3.3 | github.com/containerd/containerd v1.7.13 fixed in 1.7.35 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39833 | LOW3.3 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libsystemd0 255.4-1ubuntu8.18 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libudev1 255.4-1ubuntu8.18 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.23.1 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.23.1 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/sdk v1.23.1 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-56857 | LOW3.3 | stdlib v1.21.11 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-102269 | LOW3.24 | PyJWT 1.7.1 fixed in 2.14.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45571 | LOW3.24 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.19.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42506 | LOW3.24 | golang.org/x/net v0.33.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53493 | LOW3.18 | github.com/containerd/containerd v1.7.13 fixed in 1.7.36 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-23831 | LOW3.18 | github.com/sigstore/rekor v1.2.2 fixed in 1.5.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-24117 | LOW3.18 | github.com/sigstore/rekor v1.2.2 fixed in 1.5.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-47914 | LOW3.18 | golang.org/x/crypto v0.31.0 fixed in 0.45.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-58181 | LOW3.18 | golang.org/x/crypto v0.31.0 fixed in 0.45.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-46598 | LOW3.18 | golang.org/x/crypto v0.31.0 fixed in 0.52.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56855 | LOW3.18 | golang.org/x/crypto v0.31.0 fixed in 0.56.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-78662 | LOW3.18 | golang.org/x/crypto v0.31.0 fixed in 0.56.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-47911 | LOW3.18 | golang.org/x/net v0.33.0 fixed in 0.45.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-58190 | LOW3.18 | golang.org/x/net v0.33.0 fixed in 0.45.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-78663 | LOW3.18 | golang.org/x/net v0.33.0 fixed in 0.60.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-3219 | LOW3 | pip 20.3.3 fixed in 26.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34165 | LOW3 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.17.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39821 | LOW2.95 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2026-102270 | LOW2.94 | PyJWT 1.7.1 fixed in 2.14.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56858 | LOW2.92 | stdlib v1.21.11 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-39822 | LOW2.81 | stdlib v1.21.11 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-50271 | LOW2.7 | ddtrace 0.53.2 fixed in 4.8.2 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2024-3651 | LOW2.7 | idna 2.10 fixed in 3.7 | 1.4% Low-Moderate Risk | Post-Exploit |
| CVE-2026-41066 | LOW2.7 | lxml 4.9.2 fixed in 6.1.0 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-49476 | LOW2.7 | soupsieve 1.9.6 fixed in 2.8.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-49477 | LOW2.7 | soupsieve 1.9.6 fixed in 2.8.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2022-40898 | LOW2.7 | wheel 0.37.1 fixed in 0.38.1 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2026-4660 | LOW2.7 | github.com/hashicorp/go-getter v1.7.4 fixed in 1.8.6 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63209 | LOW2.7 | github.com/klauspost/compress v1.17.4 fixed in 1.18.7 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-33748 | LOW2.7 | github.com/moby/buildkit v0.13.0 fixed in 0.28.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-52881 | LOW2.7 | github.com/opencontainers/selinux v1.11.0 fixed in 1.13.0 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-56851 | LOW2.7 | golang.org/x/text v0.21.0 fixed in 0.41.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-39820 | LOW2.7 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-39836 | LOW2.7 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42499 | LOW2.7 | stdlib v1.21.11 fixed in 1.25.10, 1.26.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2025-8869 | LOW2.7 | pip 20.3.3 fixed in 25.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-4565 | LOW2.7 | protobuf 3.17.3 fixed in 4.25.8, 5.29.5, 6.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2024-6257 | LOW2.69 | github.com/hashicorp/go-getter v1.7.4 fixed in 1.7.5 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2025-54410 | LOW2.65 | github.com/docker/docker v25.0.7+incompatible fixed in 25.0.13, 28.0.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18477 | LOW2.64 | tar 1.35+dfsg-3ubuntu0.4 No fix yet | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-18508 | LOW2.64 | tar 1.35+dfsg-3ubuntu0.4 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-25934 | LOW2.58 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.16.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27139 | LOW2.5 | stdlib v1.21.11 fixed in 1.25.8, 1.26.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-102474 | LOW2.4 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| GO-2026-5932 | LOW2.4 | golang.org/x/crypto v0.31.0 No fix yet | — | Directly Exposed |
| CVE-2026-13346 | LOW2.34 | pip 20.3.3 fixed in 26.2.0 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-1703 | LOW2.34 | pip 20.3.3 fixed in 26.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-8959 | LOW2.29 | github.com/hashicorp/go-getter v1.7.4 fixed in 1.7.9 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-61711 | LOW2.27 | github.com/moby/buildkit v0.13.0 fixed in 0.31.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-22870 | LOW2.24 | golang.org/x/net v0.33.0 fixed in 0.36.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2021-3572 | LOW2.05 | pip 20.3.3 fixed in 21.1 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2026-44405 | LOW2.04 | paramiko 2.12.0 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| GHSA-5cpq-8wj7-hf2v | LOW2 | cryptography 3.3.2 fixed in 41.0.0 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-jm77-qphf-c4w8 | LOW2 | cryptography 3.3.2 fixed in 41.0.3 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-v8gr-m533-ghj9 | LOW2 | cryptography 3.3.2 fixed in 41.0.4 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-61712 | LOW1.98 | github.com/moby/buildkit v0.13.0 fixed in 0.31.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-95838 | LOW1.98 | github.com/containerd/containerd v1.7.13 fixed in 1.7.35 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45409 | LOW1.91 | idna 2.10 fixed in 3.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-85999 | LOW1.91 | soupsieve 1.9.6 fixed in 2.9.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-86000 | LOW1.91 | soupsieve 1.9.6 fixed in 2.9.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | login 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2023-5752 | LOW1.68 | pip 20.3.3 fixed in 23.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33762 | LOW1.68 | github.com/go-git/go-git/v5 v5.13.0 fixed in 5.17.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-8556 | LOW1.13 | github.com/cloudflare/circl v1.3.7 fixed in 1.6.1 | 0.5% Theoretical Threat | Post-Exploit |
| GHSA-xmj3-9gf7-h52w | LOW0.6 | setuptools 40.9.0.post20261022 fixed in 84.1.0 | — | Directly Exposed |
Want to check another image? Run a full scan with the Docker Security Scanner.