Vulnerability Reporteclipse-temurin:21.0.11_10-jre-resolute

eclipse-temurin:21.0.11_10-jre-resolute

digestsha256:0e9bce1bf5edd280a5778fef32fcc91eddc69bad98a0b1b2bafecdbed1f4272f

Executive Summary

Last scanned: Jul 21, 2026

Threat ScoreSAFE• Image is official and trusted from Docker Hub with high popularity and immutable digest.• All 24 exposed vulnerabilities are low severity (max 5.27), with no high or critical findings.• All 50 post-exploit vulnerabilities are low severity (max 3.16), posing minimal risk to production builds.• No high-severity CVEs or exploitable surface findings were detected.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This base/runtime image is a clean foundation for building production images. It does contain 24 low-severity and 50 low-severity vulnerabilities, but none exceed a maximum severity of 5.27, and no exploitable CVEs were found in the exposed surface. Given the low scores and lack of practical exploit paths, these vulnerabilities do not pose significant risk and do not require immediate remediation. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Relevant for eclipse-temurin:21.0.11_10-jre-resolute

How to fix CVEs in runtime Docker images

Only a handful of these findings are real. Five steps that cut the count — and VEX for the rest.

Read the article

Vulnerabilities

Vulnerability Log

82 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-13757	MEDIUM5.27	libp11-kit0 0.26.2-2 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-13757	MEDIUM5.27	p11-kit-modules 0.26.2-2 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2025-66382	MEDIUM4.67	libexpat1 2.7.4-1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-27171	MEDIUM4.67	zlib1g 1:1.3.dfsg+really1.3.1-1ubuntu3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-4046	MEDIUM4.5	libc-bin 2.43-2ubuntu2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-4046	MEDIUM4.5	libc-gconv-modules-extra 2.43-2ubuntu2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-4046	MEDIUM4.5	libc6 2.43-2ubuntu2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libmount1 2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libsmartcols1 2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libuuid1 2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-4437	MEDIUM4.42	libc-bin 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-4437	MEDIUM4.42	libc-gconv-modules-extra 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-4437	MEDIUM4.42	libc6 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-27456	MEDIUM4	libblkid1 2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-27456	MEDIUM4	libmount1 2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-27456	MEDIUM4	libsmartcols1 2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-27456	MEDIUM4	libuuid1 2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-4438	LOW3.4	libc-bin 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-4438	LOW3.4	libc-gconv-modules-extra 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-4438	LOW3.4	libc6 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-13757	LOW3.16	p11-kit 0.26.2-2 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-15146	LOW3.01	wget 1.25.0-2ubuntu4.2 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-35373	LOW2.8	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-5704	LOW2.8	tar 1.35+dfsg-4ubuntu0.2 fixed in 1.35+dfsg-4ubuntu0.3	0.4% Theoretical Threat	Post-Exploit
CVE-2026-40228	LOW2.8	libsystemd0 259.5-0ubuntu3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-40228	LOW2.8	libudev1 259.5-0ubuntu3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-3184	LOW2.7	bsdutils 1:2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-3184	LOW2.7	login 1:4.16.0-2+really2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-3184	LOW2.7	mount 2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-3184	LOW2.7	util-linux 2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-39821	LOW2.51	golang.org/x/net v0.40.0 fixed in 0.55.0	0.5% Theoretical Threat	Post-Exploit
CVE-2026-25681	LOW2.48	golang.org/x/net v0.40.0 fixed in 0.55.0	0.2% Theoretical Threat	Post-Exploit
CVE-2026-27136	LOW2.48	golang.org/x/net v0.40.0 fixed in 0.55.0	0.2% Theoretical Threat	Post-Exploit
CVE-2026-27456	LOW2.4	bsdutils 1:2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-27456	LOW2.4	login 1:4.16.0-2+really2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-27456	LOW2.4	mount 2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-27456	LOW2.4	util-linux 2.41.3-3ubuntu2 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-33814	LOW2.29	golang.org/x/net v0.40.0 fixed in 0.53.0	0.8% Theoretical Threat	Post-Exploit
CVE-2021-31879	LOW2.2	wget 1.25.0-2ubuntu4.2 No fix yet	1.1% Low-Moderate Risk	Post-Exploit
CVE-2024-2236	LOW2.12	libgcrypt20 1.12.0-2ubuntu1 No fix yet	1.1% Low-Moderate Risk	Post-Exploit
CVE-2026-6238	LOW1.99	libc-bin 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-6238	LOW1.99	libc-gconv-modules-extra 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-6238	LOW1.99	libc6 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-25680	LOW1.99	golang.org/x/net v0.40.0 fixed in 0.55.0	0.2% Theoretical Threat	Post-Exploit
CVE-2026-42502	LOW1.87	golang.org/x/net v0.40.0 fixed in 0.55.0	0.2% Theoretical Threat	Post-Exploit
CVE-2024-56433	LOW1.84	passwd 1:4.17.4-2ubuntu3 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-5435	LOW1.81	libc-bin 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-5435	LOW1.81	libc-gconv-modules-extra 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-5435	LOW1.81	libc6 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-42506	LOW1.65	golang.org/x/net v0.40.0 fixed in 0.55.0	0.2% Theoretical Threat	Post-Exploit
CVE-2026-3184	LOW1.62	libblkid1 2.41.3-3ubuntu2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2025-47911	LOW1.62	golang.org/x/net v0.40.0 fixed in 0.45.0	0.5% Theoretical Threat	Post-Exploit
CVE-2025-58190	LOW1.62	golang.org/x/net v0.40.0 fixed in 0.45.0	0.5% Theoretical Threat	Post-Exploit
CVE-2026-39822	NONE0	stdlib v1.26.4 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2	0.2% Theoretical Threat	Not Applicable
CVE-2026-4437	NONE0	locales 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Not Applicable
CVE-2026-6238	NONE0	locales 2.43-2ubuntu2 No fix yet	0.3% Theoretical Threat	Not Applicable
CVE-2026-5435	NONE0	locales 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2026-4046	NONE0	locales 2.43-2ubuntu2 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2026-42505	NONE0	stdlib v1.26.4 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2	0.4% Theoretical Threat	Not Applicable
CVE-2026-4438	NONE0	locales 2.43-2ubuntu2 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2024-56433	NONE0	login.defs 1:4.17.4-2ubuntu3 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2026-35341	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2026-35344	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35345	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	<0.1% Theoretical Threat	Not Applicable
CVE-2026-35348	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35350	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35351	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35352	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35354	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	<0.1% Theoretical Threat	Not Applicable
CVE-2026-35357	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	<0.1% Theoretical Threat	Not Applicable
CVE-2026-35359	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35360	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35363	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2026-35364	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	<0.1% Theoretical Threat	Not Applicable
CVE-2026-35367	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35368	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35370	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35371	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-35374	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	<0.1% Theoretical Threat	Not Applicable
CVE-2026-35377	NONE0	rust-coreutils 0.8.0-0ubuntu3 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2026-46600	NONE0	golang.org/x/net v0.40.0 fixed in 0.56.0	—	Not Applicable
CVE-2026-39824	NONE0	golang.org/x/sys v0.33.0 fixed in 0.44.0	0.1% Theoretical Threat	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.