Vulnerability Reportgoharbor/harbor-core:v2.13.2

goharbor/harbor-core:v2.13.2goharbor/harbor-core:v2.13.2-rc1
digestsha256:89114e3fb5c95aefa3285d5d627f89c46c3eaa2f4da138cedee887e58d297f2a

Executive Summary

Last scanned:

Threat Score
2/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

275 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2025-15467MEDIUM6.76
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
47.6%
High Exploitation Risk
Post-Exploit
CVE-2024-6119MEDIUM5.85
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
66.6%
Actively Exploited
Post-Exploit
CVE-2026-31789MEDIUM5
openssl
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-45447MEDIUM4.86
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45445MEDIUM4.64
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-28388MEDIUM4.5
openssl
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389MEDIUM4.5
openssl
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390MEDIUM4.5
openssl
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-34183MEDIUM4.5
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-15079MEDIUM4.13
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-28387MEDIUM4.13
openssl
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
0.8%
Theoretical Threat
Post-Exploit
CVE-2023-6129LOW3.9
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-5773LOW3.82
curl
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
curl
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69421LOW3.82
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-0306LOW3.77
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-69419LOW3.77
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31790LOW3.54
openssl
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42764LOW3.54
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-6237LOW3.54
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-9231LOW3.54
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-13034LOW3.47
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-1965LOW3.47
curl
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-9230LOW3.36
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-14524LOW3.31
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-4947LOW3.31
curl
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
curl
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
curl
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-0727LOW3.3
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-3805LOW3.21
curl
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-34181LOW3.21
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42768LOW3.21
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-9086LOW3.18
curl
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-5678LOW3.18
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2025-10966LOW3.01
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69420LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-42765LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-15468LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-66199LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42769LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.01
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-3783LOW2.91
curl
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-2511LOW2.89
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
54.0%
Actively Exploited
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-15469LOW2.8
openssl
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW2.8
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
curl
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7009LOW2.7
curl
8.12.0-1.ph5
fixed in 8.20.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
8.12.0-1.ph5
fixed in 8.20.0-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
curl
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5025LOW2.45
curl
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-13176LOW2.4
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-68160LOW2.4
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-9143LOW2.22
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2025-69418LOW2.04
openssl
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-9232LOW1.86
openssl
3.0.16-3.ph5
fixed in 3.0.18-1.ph5
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.24.5
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-2781NONE0
nss-libs
3.78-11.ph5
fixed in 3.78-12.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-15467NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
47.6%
High Exploitation Risk
Not Applicable
CVE-2026-31789NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-41889NONE0
github.com/jackc/pgx/v4
v4.18.3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7598NONE0
libssh2
1.11.0-4.ph5
fixed in 1.11.1-3.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-45445NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33186NONE0
google.golang.org/grpc
v1.69.4
fixed in 1.79.3
1.6%
Low-Moderate Risk
Not Applicable
CVE-2026-39828NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39832NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-55200NONE0
libssh2
1.11.0-4.ph5
fixed in 1.11.1-4.ph5
2.0%
Low-Moderate Risk
Not Applicable
CVE-2026-39821NONE0
golang.org/x/net
v0.38.0
fixed in 0.55.0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-15079NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-0861NONE0
glibc
2.36-18.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-0861NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-28387NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-45447NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
5.2%
Low-Moderate Risk
Not Applicable
CVE-2026-39831NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25681NONE0
golang.org/x/net
v0.38.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27136NONE0
golang.org/x/net
v0.38.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15558NONE0
github.com/docker/cli
v27.1.1+incompatible
fixed in 29.2.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
Linux-PAM
1.5.3-7.ph5
fixed in 1.5.3-11.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25210NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.7.4-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-libs
6.4-5.ph5
fixed in 6.5-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.24.5
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6965NONE0
sqlite-libs
3.43.2-4.ph5
fixed in 3.43.2-5.ph5
74.4%
Actively Exploited
Not Applicable
CVE-2026-5773NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-6276NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-45186NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.8.1-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-55199NONE0
libssh2
1.11.0-4.ph5
fixed in 1.11.1-5.ph5
0.9%
Theoretical Threat
Not Applicable
CVE-2024-6119NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
66.6%
Actively Exploited
Not Applicable
CVE-2025-69421NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28388NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-34183NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-32952NONE0
github.com/Azure/go-ntlmssp
v0.0.0-20221128193559-754e69321358
fixed in 0.1.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-35172NONE0
github.com/distribution/distribution
v2.8.2+incompatible
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-34986NONE0
github.com/go-jose/go-jose/v4
v4.0.5
fixed in 4.1.4
0.7%
Theoretical Threat
Not Applicable
CVE-2026-32286NONE0
github.com/jackc/pgproto3/v2
v2.3.3
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39882NONE0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
v1.34.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47913NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.43.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39829NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39830NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39835NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-46597NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
golang.org/x/net
v0.38.0
fixed in 0.53.0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.24.5
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.24.5
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.24.5
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.24.5
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.24.5
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.24.5
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.24.5
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.24.5
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.24.5
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2024-10963NONE0
Linux-PAM
1.5.3-7.ph5
fixed in 1.5.3-9.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-34182NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-0306NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-69419NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42508NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46595NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39883NONE0
go.opentelemetry.io/otel/sdk
v1.35.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47907NONE0
stdlib
v1.24.5
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-13034NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-14819NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-1965NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-14524NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-4947NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-3784NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-5545NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6429NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc
2.36-18.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-24528NONE0
krb5
1.20.2-7.ph5
fixed in 1.20.2-10.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-9149NONE0
libsolv
0.7.22-7.ph5
fixed in 0.7.22-7.2.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-9150NONE0
libsolv
0.7.22-7.ph5
fixed in 0.7.22-7.2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2023-6129NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Not Applicable
CVE-2026-41888NONE0
github.com/distribution/distribution
v2.8.2+incompatible
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39827NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39834NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25680NONE0
golang.org/x/net
v0.38.0
fixed in 0.55.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-55198NONE0
helm.sh/helm/v3
v3.17.4
fixed in 3.18.5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-55199NONE0
helm.sh/helm/v3
v3.17.4
fixed in 3.18.5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-47906NONE0
stdlib
v1.24.5
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.24.5
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.24.5
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-3805NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-34181NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-42768NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42502NONE0
golang.org/x/net
v0.38.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.24.5
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-10966NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-15281NONE0
glibc
2.36-18.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-15281NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69420NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-31790NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-3.ph5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42764NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42765NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-9076NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2023-6237NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-15468NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2025-66199NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-9231NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-22796NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-42769NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42770NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-3783NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9230NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.7%
Low-Moderate Risk
Not Applicable
CVE-2026-32776NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.7.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32777NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.7.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32778NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.7.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-0395NONE0
glibc
2.36-18.ph5
fixed in 2.36-20.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-0395NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-20.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-7383NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2024-0727NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
3.2%
Low-Moderate Risk
Not Applicable
CVE-2025-15469NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-2.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-22795NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib
1.2.13-4.ph5
fixed in 1.3.2-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39833NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.24.5
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42506NONE0
golang.org/x/net
v0.38.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.24.5
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.24.5
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-9086NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-4873NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6253NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.19.0-2.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-7009NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.20.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-7168NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.20.0-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2025-59375NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.7.3-1.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-0915NONE0
glibc
2.36-18.ph5
fixed in 2.36-22.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc
2.36-18.ph5
fixed in 2.36-23.1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-0915NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-22.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-23.1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2023-5678NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
4.5%
Low-Moderate Risk
Not Applicable
CVE-2026-42766NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.0%
Theoretical Threat
Not Applicable
CVE-2026-42767NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-34743NONE0
xz-libs
5.4.0-5.ph5
fixed in 5.4.0-6.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47914NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58181NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.45.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46598NONE0
golang.org/x/crypto
v0.36.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47911NONE0
golang.org/x/net
v0.38.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58190NONE0
golang.org/x/net
v0.38.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.24.5
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.24.5
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.24.5
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.24.5
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.24.5
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc
2.36-18.ph5
fixed in 2.36-23.1.2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc
2.36-18.ph5
fixed in 2.36-23.1.2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-23.1.2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-23.1.2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-11850NONE0
krb5
1.20.2-7.ph5
fixed in 1.20.2-14.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-34180NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-10148NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2025-14017NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.1%
Theoretical Threat
Not Applicable
CVE-2025-5025NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.16.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-15224NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2024-13176NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68160NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-35206NONE0
helm.sh/helm/v3
v3.17.4
fixed in 3.20.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-8058NONE0
glibc
2.36-18.ph5
fixed in 2.36-19.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-8058NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-19.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc
2.36-18.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc-libs
2.36-18.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-69418NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Not Applicable
CVE-2026-41080NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.8.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2024-2511NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
54.0%
Actively Exploited
Not Applicable
CVE-2024-9143NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-2.ph5
5.8%
Low-Moderate Risk
Not Applicable
CVE-2026-45446NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-libs
6.4-5.ph5
fixed in 6.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-70873NONE0
sqlite-libs
3.43.2-4.ph5
fixed in 3.43.2-6.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9232NONE0
openssl-libs
3.0.16-3.ph5
fixed in 3.0.18-1.ph5
2.3%
Low-Moderate Risk
Not Applicable
CVE-2026-33540NONE0
github.com/distribution/distribution
v2.8.2+incompatible
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-24515NONE0
expat-libs
2.7.1-2.ph5
fixed in 2.7.4-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.24.5
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
BDSA-2026-9096NONE0
curl
8.12.0-1.ph5
fixed in 8.20.0-1.ph5
Not Applicable
BDSA-2026-9096NONE0
curl-libs
8.12.0-1.ph5
fixed in 8.20.0-1.ph5
Not Applicable
BDSA-2025-0719NONE0
krb5
1.20.2-7.ph5
fixed in 1.20.2-10.ph5
Not Applicable
BDSA-2026-9020NONE0
libssh2
1.11.0-4.ph5
fixed in 1.11.1-3.ph5
Not Applicable
CVE-2025-7709NONE0
sqlite-libs
3.43.2-4.ph5
fixed in 3.43.2-5.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11822NONE0
sqlite-libs
3.43.2-4.ph5
fixed in 3.43.2-7.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
sqlite-libs
3.43.2-4.ph5
fixed in 3.43.2-7.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-24358NONE0
github.com/gorilla/csrf
v1.7.2
fixed in 1.7.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47909NONE0
github.com/gorilla/csrf
v1.7.2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-2303NONE0
go.mongodb.org/mongo-driver
v1.14.0
fixed in 1.17.7
0.2%
Theoretical Threat
Not Applicable
CVE-2026-24051NONE0
go.opentelemetry.io/otel/sdk
v1.35.0
fixed in 1.40.0
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.36.0
No fix yet
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.38.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.31.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.23.0
fixed in 0.39.0
0.4%
Theoretical Threat
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.69.4
fixed in 1.82.1
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.