Vulnerability Reportgitlab/gitlab-ce:18.11.9-ce.0

gitlab/gitlab-ce:18.11.9-ce.0
digestsha256:1e89377a1c04b228a7d291a35889b4931342378cce0e2e2f33f908d303fe10b2

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit crafted OpenSSL CMS or DTLS traffic to crash the service or expose heap memory, and crafted Perl deserialization or tar inputs could exhaust memory and disrupt GitLab availability (CVE-2026-63072, CVE-2026-84782). The image has exposed_total of 103, but exposed_count_ge6 is 6 and exposed_count_ge7 is 0, while post_max_severity is 3.98, so the verdict is CAUTION rather than DANGEROUS. The image is popular and pinned by digest, but it is not official or verified, so production use should be limited to deployments with strict compensating controls and prompt patching.

Vulnerabilities

Vulnerability Log

203 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-57433MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9538MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-63072MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89157MEDIUM6.29
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2ubuntu0.1
fixed in 1.10.3-2ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89158MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89160MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15649MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19487MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.2-1build1.1
fixed in 1:2.5.2-1ubuntu0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106553MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106553MEDIUM5.1
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-6791MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534MEDIUM4.84
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-63076MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-63076MEDIUM4.5
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-12087MEDIUM4.5
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5.1build0.1
fixed in 1.0.8-5.1ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48959MEDIUM4.25
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106583LOW3.98
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW3.83
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-106553LOW3.82
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106555LOW3.82
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW3.77
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-31879LOW3.66
wget
1.21.4-1ubuntu4.4
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-106586LOW3.65
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106586LOW3.65
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19542LOW3.57
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-106585LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-56433LOW3.06
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54872LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW2.98
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73281LOW2.98
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534LOW2.91
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW2.8
libncursesw6
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
libtinfo6
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.16
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
ncurses-base
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
ncurses-bin
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-60876LOW2.75
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53910LOW2.7
diffutils
1:3.10-1build1
fixed in 1:3.10-1ubuntu0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-16742LOW2.69
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-16742LOW2.69
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.51
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW2.39
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.33
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.4-3ubuntu6.2
fixed in 9.4-3ubuntu6.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106586LOW2.19
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106582LOW1.89
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106584LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106587LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gpgv
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-58251NONE0
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-67693NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88647NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.