Vulnerability Reportenvoyproxy/envoy:distroless-dev-7391e85629947836c65ca9f7e591326e51b5c084

envoyproxy/envoy:distroless-dev-7391e85629947836c65ca9f7e591326e51b5c084
digestsha256:0f07f3d6f50f82e4d16a5b6c16ddb64fe924a3d7d39ed41d5cd9a79c383bf501

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
RELIABLE

This image is safe for production use. The vulnerability scan found 2 exposed and 9 post-exploit only issues, but all are low severity (max 4.25) with no exploitable path from the network. The image is from a trusted publisher and pinned by digest, ensuring integrity.

Vulnerabilities

Vulnerability Log

11 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-5450MEDIUM4.25
libc6
2.36-9+deb12u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc6
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.36-9+deb12u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.36-9+deb12u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.36-9+deb12u14
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2026-6238LOW1.99
libc6
2.36-9+deb12u14
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2019-1010024LOW1.91
libc6
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010025LOW1.91
libc6
2.36-9+deb12u14
No fix yet
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-5435LOW1.81
libc6
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2010-4756LOW1.44
libc6
2.36-9+deb12u14
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.