Vulnerability Reporteclipse-temurin:21.0.12.1_1-jdk-jammy

eclipse-temurin:21.0.12.1_1-jdk-jammyeclipse-temurin:21-jdk-jammyeclipse-temurin:21-jammy
digestsha256:742daacb9316be4b6fc60258f6e4ac2a11882f6c597373c92290a57bfad0d2e0

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This base/runtime image is a clean foundation for building production images. It is an official Docker Hub image pinned by digest, and the supplied vulnerability stats show 38 exposed-surface entries and 54 post-exploit-only entries, but their maximum severities are only 5.5 and 3.3 respectively. Because none reach the 6.0 threshold and no top CVE findings were provided, these inherited low-severity issues do not change the SAFE verdict. Images built on this base should still be scanned after adding application layers and dependencies, since those additions can introduce higher-severity risks. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Relevant for eclipse-temurin:21.0.12.1_1-jdk-jammy

How to fix CVEs in runtime Docker images

Only a handful of these findings are real. Five steps that cut the count — and VEX for the rest.

Read the article

Vulnerabilities

Vulnerability Log

107 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2017-13716MEDIUM5.5
libbinutils
2.38-4ubuntu2.12
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010204MEDIUM5.5
libbinutils
2.38-4ubuntu2.12
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2017-13716MEDIUM5.5
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010204MEDIUM5.5
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2017-13716MEDIUM5.5
libctf0
2.38-4ubuntu2.12
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010204MEDIUM5.5
libctf0
2.38-4ubuntu2.12
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-27943MEDIUM4.67
gcc-12-base
12.3.0-1ubuntu1~22.04.3
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM4.67
libbinutils
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libbinutils
2.38-4ubuntu2.12
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2022-48064MEDIUM4.67
libbinutils
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM4.67
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2022-48064MEDIUM4.67
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM4.67
libctf0
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libctf0
2.38-4ubuntu2.12
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2022-48064MEDIUM4.67
libctf0
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-66382MEDIUM4.67
libexpat1
2.4.7-1ubuntu0.9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.3.0-1ubuntu1~22.04.3
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.3.0-1ubuntu1~22.04.3
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.35-0ubuntu3.15
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.35-0ubuntu3.15
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.35-0ubuntu3.15
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.35-0ubuntu3.15
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2017-13716LOW3.3
binutils
2.38-4ubuntu2.12
No fix yet
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010204LOW3.3
binutils
2.38-4ubuntu2.12
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2017-13716LOW3.3
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010204LOW3.3
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-1152LOW3.15
libbinutils
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libctf0
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69651LOW2.8
binutils
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-27943LOW2.8
binutils
2.38-4ubuntu2.12
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2022-48064LOW2.8
binutils
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-69651LOW2.8
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-27943LOW2.8
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2022-48064LOW2.8
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.11+git20210903+057cd650a4ed-3build1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW2.8
libbinutils
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW2.8
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW2.8
libctf0
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
249.11-0ubuntu3.22
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
249.11-0ubuntu3.22
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2022-41409LOW2.7
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-4899LOW2.7
libzstd1
1.4.8+dfsg-3build1
No fix yet
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-86145LOW2.51
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW2.38
libbinutils
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.38
libctf-nobfd0
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.38
libctf0
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-86414LOW2.34
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-92388LOW2.34
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-86414LOW2.34
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-92388LOW2.34
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-103111LOW2.33
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-107161LOW2.29
libsasl2-2
2.1.27+dfsg2-3ubuntu1.2
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-107161LOW2.29
libsasl2-modules-db
2.1.27+dfsg2-3ubuntu1.2
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-88647LOW2.26
libgnutls30
3.7.3-4ubuntu1.9
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89157LOW2.26
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.34+dfsg-1ubuntu0.1.22.04.6
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.34+dfsg-1ubuntu0.1.22.04.6
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-87862LOW2.22
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-87864LOW2.22
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-92389LOW2.22
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-92391LOW2.22
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-87862LOW2.22
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-87864LOW2.22
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-92389LOW2.22
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-92391LOW2.22
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2021-31879LOW2.2
wget
1.21.2-2ubuntu1.5
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.11+git20210903+057cd650a4ed-3build1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89158LOW1.99
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89160LOW1.99
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-94266LOW1.98
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-94266LOW1.98
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-86409LOW1.91
curl
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2026-86409LOW1.91
libcurl4
7.81.0-1ubuntu1.30
No fix yet
—
Post-Exploit
CVE-2025-1152LOW1.89
binutils
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-1152LOW1.89
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-67693LOW1.81
libgnutls30
3.7.3-4ubuntu1.9
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89156LOW1.81
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW1.68
binutils
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW1.68
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW1.43
binutils
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW1.43
binutils-x86-64-linux-gnu
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-50495NONE0
libncurses6
6.3-2ubuntu0.3
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
libncursesw6
6.3-2ubuntu0.3
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.3-2ubuntu0.3
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.3-2ubuntu0.3
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.3-2ubuntu0.3
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-69651NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2019-1010204NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
1.1%
Low-Moderate Risk
Not Applicable
CVE-2022-27943NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2022-48064NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2026-18374NONE0
locales
2.35-0ubuntu3.15
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-89092NONE0
locales
2.35-0ubuntu3.15
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
binutils-common
2.38-4ubuntu2.12
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30
3.7.3-4ubuntu1.9
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30
3.7.3-4ubuntu1.9
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30
3.7.3-4ubuntu1.9
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.2.11.dfsg-2ubuntu9.2
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.