Vulnerability Reportdenoland/deno:distroless-2.6.7

denoland/deno:distroless-2.6.7
digestsha256:b7159b8fa08d5be17b964e0ea8a4dd3b681049e4ad624707868ba51ace778314

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Relevant for denoland/deno:distroless-2.6.7

How to fix CVEs in runtime Docker images

Only a handful of these findings are real. Five steps that cut the count — and VEX for the rest.

Read the article

Vulnerabilities

Vulnerability Log

38 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-5435MEDIUM5.02
libc6
2.36-9+deb12u13
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-31789MEDIUM5
libssl3
3.0.18-1~deb12u2
fixed in 3.0.19-1~deb12u2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgomp1
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM4.5
libssl3
3.0.18-1~deb12u2
fixed in 3.0.19-1~deb12u2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.36-9+deb12u13
fixed in 2.36-9+deb12u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.36-9+deb12u13
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3
3.0.18-1~deb12u2
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.36-9+deb12u13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.36-9+deb12u13
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM4.13
libssl3
3.0.18-1~deb12u2
fixed in 3.0.19-1~deb12u2
0.8%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.36-9+deb12u13
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010022LOW3.53
libc6
2.36-9+deb12u13
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-4438LOW3.4
libc6
2.36-9+deb12u13
fixed in 2.36-9+deb12u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2019-1010023LOW3.17
libc6
2.36-9+deb12u13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-45446LOW3.15
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45447LOW2.92
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45445LOW2.78
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
0.6%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.36-9+deb12u13
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.36-9+deb12u13
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
libssl3
3.0.18-1~deb12u2
fixed in 3.0.19-1~deb12u2
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
libssl3
3.0.18-1~deb12u2
fixed in 3.0.19-1~deb12u2
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-0861LOW2.48
libc6
2.36-9+deb12u13
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW2.26
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31790LOW2.12
libssl3
3.0.18-1~deb12u2
fixed in 3.0.19-1~deb12u2
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-4437LOW1.99
libc6
2.36-9+deb12u13
fixed in 2.36-9+deb12u14
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6238LOW1.99
libc6
2.36-9+deb12u13
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2019-1010024LOW1.91
libc6
2.36-9+deb12u13
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010025LOW1.91
libc6
2.36-9+deb12u13
No fix yet
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-15281LOW1.81
libc6
2.36-9+deb12u13
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW1.81
libssl3
3.0.18-1~deb12u2
fixed in 3.0.20-1~deb12u2
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-27943NONE0
gcc-12-base
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2025-27587NONE0
libssl3
3.0.18-1~deb12u2
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.