Vulnerability Reportghost:6.54.1-bookworm

ghost:6.54.1-bookwormghost:6.54.1ghost:6.54-bookwormghost:6.54
digestsha256:3c024fe69512110bfa7f0f07da75a5f1c89ef0a79a23d9f4d0717a88827f869b

Executive Summary

Last scanned:

Threat Score
77/100DANGEROUS
Reputation
TRUSTED

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit vulnerabilities in HTTP header parsing (CVE-2022-25881) and input validation (CVE-2021-3765) to cause denial of service, or use crafted archives (CVE-2026-10732) to achieve arbitrary file write and potential remote code execution on the host system. With 38 exposed vulnerabilities and two high-severity findings, the image is not safe to run without comprehensive remediation.

Hardening plan for this image · 4 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

222 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2022-25881HIGH7.5
http-cache-semantics
3.8.1
fixed in 4.1.1
1.6%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2021-3765HIGH7.5
validator
7.2.0
fixed in 13.7.0
1.7%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2026-53486MEDIUM6.88
decompress
4.2.1
No fix yet
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-10732MEDIUM6.38
decompress
4.2.1
No fix yet
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-59873MEDIUM6.38
tar
7.5.11
fixed in 7.5.19
0.4%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-59871MEDIUM6.38
tar
7.5.11
fixed in 7.5.18
0.4%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-6238MEDIUM5.52
libc-bin
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.36-9+deb12u14
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.36-9+deb12u14
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-33987MEDIUM5.3
got
8.3.2
fixed in 12.1.0, 11.8.5
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-33987MEDIUM5.3
got
9.6.0
fixed in 12.1.0, 11.8.5
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.24.1-2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42338MEDIUM5.18
ip-address
10.1.0
fixed in 10.1.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.36-9+deb12u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48815MEDIUM5.02
sigstore
3.1.0
fixed in 4.1.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.13.dfsg-1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48758MEDIUM4.59
@sigstore/core
2.0.0
fixed in 3.2.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33672MEDIUM4.5
picomatch
4.0.3
fixed in 4.0.4, 3.0.2, 2.3.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5+b1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.36-9+deb12u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.36-9+deb12u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.36-9+deb12u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam0g
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam0g
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.36-9+deb12u14
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.36-9+deb12u14
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-48962LOW3.98
perl-base
5.36.0-7+deb12u3
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-59874LOW3.82
tar
7.5.11
fixed in 7.5.18
0.4%
Theoretical Threat
Post-Exploit
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1.2+deb12u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc-bin
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.36-9+deb12u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.13.dfsg-1
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2016-2781LOW3.31
coreutils
9.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.36.0-7+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.36-9+deb12u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.36-9+deb12u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-14104LOW3.11
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
9.1-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.36.0-7+deb12u3
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1.2+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53655LOW2.8
tar
7.5.11
fixed in 7.5.16
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.36-9+deb12u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc-bin
2.36-9+deb12u14
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.36-9+deb12u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.36-9+deb12u14
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.10.1-3+deb12u1
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-59875LOW2.7
tar
7.5.11
fixed in 7.5.17
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.36.0-7+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.36.0-7+deb12u3
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.13+dfsg1-1+deb12u2
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
9.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.12-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW2.29
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13149LOW2.29
brace-expansion
2.0.2
fixed in 5.0.7, 1.1.16, 2.1.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-33750LOW2.29
brace-expansion
2.0.2
fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.1-1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW2.24
coreutils
9.1-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.6.1
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-2236LOW2.12
libgcrypt20
1.10.1-3+deb12u1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-13151LOW2.12
libtasn1-6
4.19.0-2+deb12u1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2011-3389LOW2.01
libgnutls30
3.7.9-2+deb12u7
No fix yet
73.3%
Actively Exploited
Post-Exploit
CVE-2026-33671LOW1.99
picomatch
4.0.3
fixed in 4.0.4, 3.0.2, 2.3.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-1+deb12u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.36.0-7+deb12u3
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.24.6
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4-4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4-4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4-4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.24.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.24.6
fixed in 1.24.11, 1.25.5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2026-54369NONE0
libacl1
2.3.1-3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.4-4
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.4-4
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.4-4
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.24.6
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54370NONE0
libacl1
2.3.1-3
No fix yet
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-54371NONE0
libattr1
1:2.5.1-4
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-14104NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-14104NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-14104NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-14104NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2022-27943NONE0
gcc-12-base
12.2.0-14+deb12u1
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2022-0563NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-0563NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-0563NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-0563NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13595NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-3184NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13595NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-3184NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13595NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-3184NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2023-31437NONE0
libsystemd0
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31438NONE0
libsystemd0
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31439NONE0
libsystemd0
252.39-1~deb12u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2023-31437NONE0
libudev1
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31438NONE0
libudev1
252.39-1~deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31439NONE0
libudev1
252.39-1~deb12u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13595NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-3184NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.24.6
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.24.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2007-5686NONE0
login
1:4.13+dfsg1-1+deb12u2
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules-bin
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-runtime
1.5.2-6+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2011-3374NONE0
libapt-pkg6.0
2.6.1
No fix yet
1.2%
Low-Moderate Risk
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-1+deb12u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2013-4392NONE0
libsystemd0
252.39-1~deb12u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libsystemd0
252.39-1~deb12u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2013-4392NONE0
libudev1
252.39-1~deb12u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libudev1
252.39-1~deb12u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gpgv
2.2.40-1.1+deb12u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.2.15-2+b13
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53910NONE0
diffutils
1:3.8-4
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.13+dfsg1-1+deb12u2
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
mount
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
mount
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.13+dfsg1-1+deb12u2
No fix yet
—
Not Applicable
CVE-2026-57433NONE0
perl-base
5.36.0-7+deb12u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-base
5.36.0-7+deb12u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.36.0-7+deb12u3
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
3.06-4
No fix yet
—
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1.2+deb12u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
util-linux
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
util-linux
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
util-linux-extra
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
util-linux-extra
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-14257NONE0
brace-expansion
2.0.2
fixed in 5.0.8
0.3%
Theoretical Threat
Not Applicable
GHSA-r292-9mhp-454mNONE0
tar
7.5.11
fixed in 7.5.21
—
Not Applicable
GHSA-r292-9mhp-454mNONE0
tar
7.5.20
fixed in 7.5.21
—
Not Applicable
CVE-2025-12758NONE0
validator
7.2.0
fixed in 13.15.22
0.5%
Theoretical Threat
Not Applicable
CVE-2025-56200NONE0
validator
7.2.0
fixed in 13.15.20
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.1.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.