Vulnerability Reportfalcosecurity/falco:x86_64-master

falcosecurity/falco:x86_64-master

digestsha256:39ef8d17dbd9f32108dd6a1419b70c843138eb913ecd20f38bd519b5a357203b

Executive Summary

Last scanned: Jul 24, 2026

Threat ScoreSAFE• High reputation community image with 70M+ pulls and trust score of 90.• Image pinned by digest, ensuring immutability and integrity.• Threat score is 0, indicating no exploitable vulnerabilities.• No high-severity exposed or post-exploit findings (max severity 0.0).• Popular image from falcosecurity, suitable for production use.

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (70M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. The image has an excellent reputation and is pinned by digest, ensuring integrity. While there are a few low-severity vulnerabilities (exposed_total=4), they have minimal or no practical impact due to their low severity and the container's context. No high-severity or critical findings are present. The threat score of 0 confirms the low risk.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

4 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-6791	NONE0	glibc 2.43-r8 fixed in 2.43-r10	—	Not Applicable
CVE-2026-6791	NONE0	glibc-locale-posix 2.43-r8 fixed in 2.43-r10	—	Not Applicable
CVE-2026-6791	NONE0	ld-linux 2.43-r8 fixed in 2.43-r10	—	Not Applicable
CVE-2026-6791	NONE0	libcrypt1 2.43-r8 fixed in 2.43-r10	—	Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.