Vulnerability Reportfalcosecurity/falco:x86_64-master

falcosecurity/falco:x86_64-master

digestsha256:39ef8d17dbd9f32108dd6a1419b70c843138eb913ecd20f38bd519b5a357203b

Executive Summary

Last scanned: Jul 24, 2026

Threat ScoreSAFE• High reputation community image with 70M+ pulls and trust score of 90.• Image pinned by digest, ensuring immutability and integrity.• Threat score is 0, indicating no exploitable vulnerabilities.• No high-severity exposed or post-exploit findings (max severity 0.0).• Popular image from falcosecurity, suitable for production use.

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (70M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. The image has an excellent reputation and is pinned by digest, ensuring integrity. While there are a few low-severity vulnerabilities (exposed_total=4), they have minimal or no practical impact due to their low severity and the container's context. No high-severity or critical findings are present. The threat score of 0 confirms the low risk.

Vulnerabilities

Vulnerability Log

4 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-6791	NONE0	glibc 2.43-r8 fixed in 2.43-r10	—	Not Applicable
CVE-2026-6791	NONE0	glibc-locale-posix 2.43-r8 fixed in 2.43-r10	—	Not Applicable
CVE-2026-6791	NONE0	ld-linux 2.43-r8 fixed in 2.43-r10	—	Not Applicable
CVE-2026-6791	NONE0	libcrypt1 2.43-r8 fixed in 2.43-r10	—	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.