Vulnerability Reportgitlab/gitlab-ce:19.0.8-ce.0

gitlab/gitlab-ce:19.0.8-ce.0
digestsha256:e70e72264bbff1702419fcf3328a68325dbdce032032eae3fdab00bffb44976f

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could trigger denial-of-service conditions through crafted Perl or OpenSSL inputs, such as CVE-2026-63072 and CVE-2026-57433, potentially disrupting GitLab availability. The image is popular and pinned by digest, but the six exposed findings at severity 6.0 or higher still warrant remediation before production. Some OpenSSL CMP or DTLS findings only apply when those features are enabled and exposed, so not using those services eliminates that specific risk.

Vulnerabilities

Vulnerability Log

203 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-57433MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9538MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-63072MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89157MEDIUM6.29
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2ubuntu0.1
fixed in 1.10.3-2ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89158MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89160MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15649MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19487MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.2-1build1.1
fixed in 1:2.5.2-1ubuntu0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106553MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106553MEDIUM5.1
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-6791MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534MEDIUM4.84
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-12087MEDIUM4.5
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5.1build0.1
fixed in 1.0.8-5.1ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48959MEDIUM4.25
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106583LOW3.98
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW3.77
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-31879LOW3.66
wget
1.21.4-1ubuntu4.4
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-106586LOW3.65
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106586LOW3.65
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19542LOW3.57
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-106585LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54872LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW2.98
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73281LOW2.98
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534LOW2.91
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.16
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-60876LOW2.75
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63076LOW2.7
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-63076LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53910LOW2.7
diffutils
1:3.10-1build1
fixed in 1:3.10-1ubuntu0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-16742LOW2.69
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-16742LOW2.69
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.51
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW2.39
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.33
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-106553LOW2.29
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106555LOW2.29
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.4-3ubuntu6.2
fixed in 9.4-3ubuntu6.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106586LOW2.19
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106582LOW1.89
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106584LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106587LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-13221NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-57432NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-48962NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Not Applicable
CVE-2026-57433NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-9538NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-15649NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Not Applicable
CVE-2026-19487NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Not Applicable
CVE-2026-15534NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-12087NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-48959NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libncursesw6
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gpgv
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-67693NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88647NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.