Vulnerability Reportgoharbor/harbor-core:v2.7.0

goharbor/harbor-core:v2.7.0
digestsha256:1281482284cbac7633b579717bcb4eb7bc5838fe2128e9aa284c16703a710555

Executive Summary

Last scanned:

Threat Score
25/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

415 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2023-38545HIGH7.64
curl
7.86.0-1.ph4
fixed in 8.1.2-6.ph4
78.5%
Actively Exploited
Post-Exploit
CVE-2025-15467MEDIUM6.76
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
47.6%
High Exploitation Risk
Post-Exploit
CVE-2023-38039MEDIUM5.85
curl
7.86.0-1.ph4
fixed in 8.1.2-5.ph4
62.2%
Actively Exploited
Post-Exploit
CVE-2024-6119MEDIUM5.85
openssl
3.0.7-1.ph4
fixed in 3.0.15-1.ph4
66.6%
Actively Exploited
Post-Exploit
CVE-2023-0286MEDIUM5.77
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
59.5%
Actively Exploited
Post-Exploit
CVE-2023-27533MEDIUM5.28
curl
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-27534MEDIUM5.28
curl
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-43551MEDIUM5.17
curl
7.86.0-1.ph4
fixed in 7.86.0-3.ph4
16.5%
High Exploitation Risk
Post-Exploit
CVE-2024-2398MEDIUM5.17
curl
7.86.0-1.ph4
fixed in 8.1.2-8.ph4
36.1%
High Exploitation Risk
Post-Exploit
CVE-2022-4450MEDIUM5.17
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
20.4%
High Exploitation Risk
Post-Exploit
CVE-2023-2650MEDIUM5.07
openssl
3.0.7-1.ph4
fixed in 3.0.9-1.ph4
75.1%
Actively Exploited
Post-Exploit
CVE-2026-31789MEDIUM5
openssl
3.0.7-1.ph4
fixed in 3.0.18-3.ph4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-45447MEDIUM4.86
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-23914MEDIUM4.64
curl
7.86.0-1.ph4
fixed in 7.86.0-4.ph4
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-45445MEDIUM4.64
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.6%
Theoretical Threat
Post-Exploit
CVE-2024-6197MEDIUM4.5
curl
7.86.0-1.ph4
fixed in 8.7.1-2.ph4
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-3996MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.7-2.ph4
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-0215MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-0216MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0217MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0401MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0464MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.7-6.ph4
3.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-5363MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.9-7.ph4
3.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.18-3.ph4
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.18-3.ph4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.18-3.ph4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-34183MEDIUM4.5
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2024-7264MEDIUM4.48
curl
7.86.0-1.ph4
fixed in 8.7.1-3.ph4
17.3%
High Exploitation Risk
Post-Exploit
CVE-2025-15079MEDIUM4.13
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-28387MEDIUM4.13
openssl
3.0.7-1.ph4
fixed in 3.0.18-3.ph4
0.8%
Theoretical Threat
Post-Exploit
CVE-2022-4304MEDIUM4.07
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
16.2%
High Exploitation Risk
Post-Exploit
CVE-2023-4807LOW3.98
openssl
3.0.7-1.ph4
fixed in 3.0.9-6.ph4
0.9%
Theoretical Threat
Post-Exploit
CVE-2023-23916LOW3.9
curl
7.86.0-1.ph4
fixed in 7.86.0-4.ph4
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-46218LOW3.9
curl
7.86.0-1.ph4
fixed in 8.7.1-1.ph4
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-9681LOW3.9
curl
7.86.0-1.ph4
fixed in 8.7.1-4.ph4
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-5773LOW3.82
curl
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
curl
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69421LOW3.82
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69419LOW3.77
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-43552LOW3.54
curl
7.86.0-1.ph4
fixed in 7.86.0-3.ph4
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-27535LOW3.54
curl
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-27536LOW3.54
curl
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-28320LOW3.54
curl
7.86.0-1.ph4
fixed in 8.1.2-1.ph4
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-11053LOW3.54
curl
7.86.0-1.ph4
fixed in 8.12.0-1.ph4
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2024-5535LOW3.54
openssl
3.0.7-1.ph4
fixed in 3.0.14-2.ph4
5.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-31790LOW3.54
openssl
3.0.7-1.ph4
fixed in 3.0.18-3.ph4
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42764LOW3.54
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-13034LOW3.47
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-1965LOW3.47
curl
7.86.0-1.ph4
fixed in 8.19.0-1.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-4741LOW3.36
openssl
3.0.7-1.ph4
fixed in 3.0.14-1.ph4
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2025-9230LOW3.36
openssl
3.0.7-1.ph4
fixed in 3.0.18-1.ph4
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-23915LOW3.31
curl
7.86.0-1.ph4
fixed in 7.86.0-4.ph4
0.9%
Theoretical Threat
Post-Exploit
CVE-2024-8096LOW3.31
curl
7.86.0-1.ph4
fixed in 8.12.0-1.ph4
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-4947LOW3.31
curl
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
curl
7.86.0-1.ph4
fixed in 8.19.0-1.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
curl
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-27538LOW3.3
curl
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2024-0727LOW3.3
openssl
3.0.7-1.ph4
fixed in 3.0.9-9.ph4
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-34181LOW3.21
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-9086LOW3.18
curl
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-46219LOW3.18
curl
7.86.0-1.ph4
fixed in 8.7.1-1.ph4
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2024-2004LOW3.18
curl
7.86.0-1.ph4
fixed in 8.1.2-8.ph4
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-0465LOW3.18
openssl
3.0.7-1.ph4
fixed in 3.0.7-6.ph4
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-3446LOW3.18
openssl
3.0.7-1.ph4
fixed in 3.0.9-3.ph4
6.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-3817LOW3.18
openssl
3.0.7-1.ph4
fixed in 3.0.9-4.ph4
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-5678LOW3.18
openssl
3.0.7-1.ph4
fixed in 3.0.9-8.ph4
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2025-10966LOW3.01
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69420LOW3.01
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-42765LOW3.01
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.01
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.01
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2022-4203LOW2.94
openssl
3.0.7-1.ph4
fixed in 3.0.7-4.ph4
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2026-3783LOW2.91
curl
7.86.0-1.ph4
fixed in 8.19.0-1.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-2511LOW2.89
openssl
3.0.7-1.ph4
fixed in 3.0.13-4.ph4
54.0%
Actively Exploited
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW2.8
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.1%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
shadow
4.8.1-3.ph4
fixed in 4.13-2.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
curl
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
7.86.0-1.ph4
fixed in 8.20.0-1.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-2975LOW2.7
openssl
3.0.7-1.ph4
fixed in 3.0.9-2.ph4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
1.0%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
curl
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5025LOW2.45
curl
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-68160LOW2.4
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.2%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
shadow
4.8.1-3.ph4
fixed in 4.13-1.ph4
0.3%
Theoretical Threat
Post-Exploit
CVE-2023-28322LOW2.22
curl
7.86.0-1.ph4
fixed in 8.1.1-1.ph4
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-38546LOW2.22
curl
7.86.0-1.ph4
fixed in 8.1.2-6.ph4
6.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-9143LOW2.22
openssl
3.0.7-1.ph4
fixed in 3.0.16-1.ph4
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2025-69418LOW2.04
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.7-1.ph4
fixed in 3.0.21-1.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-9232LOW1.86
openssl
3.0.7-1.ph4
fixed in 3.0.18-2.ph4
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-29383LOW1.68
shadow
4.8.1-3.ph4
fixed in 4.8.1-5.ph4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.19.4
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2024-41110NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 23.0.15, 26.1.5, 27.1.1, 25.0.6
16.5%
High Exploitation Risk
Not Applicable
CVE-2023-38545NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.2-6.ph4
78.5%
Actively Exploited
Not Applicable
CVE-2024-45491NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-3.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-45492NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-3.ph4
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-0687NONE0
glibc
2.32-11.ph4
fixed in 2.32-15.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-56171NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-15.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2022-36320NONE0
nss-libs
3.72-2.ph4
fixed in 3.72-3.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2026-2781NONE0
nss-libs
3.72-2.ph4
fixed in 3.72-7.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2023-45853NONE0
zlib
1.2.11-4.ph4
fixed in 1.2.11-6.ph4
3.2%
Low-Moderate Risk
Not Applicable
CVE-2026-41889NONE0
github.com/jackc/pgx/v4
v4.12.0
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2023-24538NONE0
stdlib
v1.19.4
fixed in 1.19.8, 1.20.3
2.3%
Low-Moderate Risk
Not Applicable
CVE-2023-24540NONE0
stdlib
v1.19.4
fixed in 1.19.9, 1.20.4
1.5%
Low-Moderate Risk
Not Applicable
CVE-2024-24790NONE0
stdlib
v1.19.4
fixed in 1.21.11, 1.22.4
2.0%
Low-Moderate Risk
Not Applicable
CVE-2025-30223NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.3.6
0.6%
Theoretical Threat
Not Applicable
CVE-2023-23914NONE0
curl-libs
7.86.0-1.ph4
fixed in 7.86.0-4.ph4
0.9%
Theoretical Threat
Not Applicable
CVE-2024-37371NONE0
krb5
1.17-7.ph4
fixed in 1.17-12.ph4
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-49794NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-18.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2025-49796NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-18.ph4
1.4%
Low-Moderate Risk
Not Applicable
CVE-2026-33186NONE0
google.golang.org/grpc
v1.47.0
fixed in 1.79.3
1.6%
Low-Moderate Risk
Not Applicable
CVE-2024-3596NONE0
krb5
1.17-7.ph4
fixed in 1.17-14.ph4
14.9%
High Exploitation Risk
Not Applicable
CVE-2023-27533NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
2.0%
Low-Moderate Risk
Not Applicable
CVE-2023-27534NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
2.2%
Low-Moderate Risk
Not Applicable
CVE-2024-2961NONE0
glibc
2.32-11.ph4
fixed in 2.32-17.ph4
88.3%
Actively Exploited
Not Applicable
CVE-2022-42898NONE0
krb5
1.17-7.ph4
fixed in 1.17-9.ph4
6.4%
Low-Moderate Risk
Not Applicable
CVE-2023-0767NONE0
nss-libs
3.72-2.ph4
fixed in 3.72-4.ph4
0.8%
Theoretical Threat
Not Applicable
CVE-2024-40464NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.2.1
0.6%
Theoretical Threat
Not Applicable
CVE-2024-40465NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39828NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2023-28840NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 20.10.24, 23.0.3
2.7%
Low-Moderate Risk
Not Applicable
CVE-2026-39832NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-53547NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.18.4, 3.17.4
0.4%
Theoretical Threat
Not Applicable
CVE-2024-45337NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.31.0
3.2%
Low-Moderate Risk
Not Applicable
CVE-2026-39821NONE0
golang.org/x/net
v0.2.0
fixed in 0.55.0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-15079NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2026-0861NONE0
glibc
2.32-11.ph4
fixed in 2.32-22.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-33997NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 29.3.1
0.4%
Theoretical Threat
Not Applicable
CVE-2024-27289NONE0
github.com/jackc/pgx/v4
v4.12.0
fixed in 4.18.2
0.9%
Theoretical Threat
Not Applicable
CVE-2024-27304NONE0
github.com/jackc/pgx/v4
v4.12.0
fixed in 4.18.2
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-39831NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25681NONE0
golang.org/x/net
v0.2.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27136NONE0
golang.org/x/net
v0.2.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15558NONE0
github.com/docker/cli
v20.10.17+incompatible
fixed in 29.2.0
0.5%
Theoretical Threat
Not Applicable
CVE-2022-1304NONE0
e2fsprogs-libs
1.45.6-2.ph4
fixed in 1.46.5-2.ph4
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-1372NONE0
elfutils-libelf
0.181-6.ph4
fixed in 0.181-8.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2023-2603NONE0
libcap
2.43-2.ph4
fixed in 2.43-3.ph4
0.6%
Theoretical Threat
Not Applicable
CVE-2022-49043NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-18.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-libs
6.2-6.ph4
fixed in 6.5-2.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2024-25621NONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.7.29
0.2%
Theoretical Threat
Not Applicable
CVE-2023-25173NONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.5.18, 1.6.18
0.5%
Theoretical Threat
Not Applicable
CVE-2024-40635NONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.7.27, 1.6.38
0.3%
Theoretical Threat
Not Applicable
CVE-2026-34040NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 29.3.1
10.1%
High Exploitation Risk
Not Applicable
CVE-2024-24557NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 24.0.9, 25.0.2
0.3%
Theoretical Threat
Not Applicable
CVE-2023-29403NONE0
stdlib
v1.19.4
fixed in 1.19.10, 1.20.5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.19.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-24928NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-15.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6965NONE0
sqlite-libs
3.38.5-1.ph4
fixed in 3.38.5-6.ph4
74.4%
Actively Exploited
Not Applicable
CVE-2024-33599NONE0
glibc
2.32-11.ph4
fixed in 2.32-18.ph4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-43551NONE0
curl-libs
7.86.0-1.ph4
fixed in 7.86.0-3.ph4
16.5%
High Exploitation Risk
Not Applicable
CVE-2023-38039NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.2-5.ph4
62.2%
Actively Exploited
Not Applicable
CVE-2024-2398NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.2-8.ph4
36.1%
High Exploitation Risk
Not Applicable
CVE-2024-6197NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.7.1-2.ph4
4.3%
Low-Moderate Risk
Not Applicable
CVE-2026-5773NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-6276NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-1352NONE0
elfutils-libelf
0.181-6.ph4
fixed in 0.181-8.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2023-52425NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-1.ph4
1.8%
Low-Moderate Risk
Not Applicable
CVE-2024-28757NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-2.ph4
2.0%
Low-Moderate Risk
Not Applicable
CVE-2024-45490NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-3.ph4
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-8176NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.7.1-1.ph4
1.6%
Low-Moderate Risk
Not Applicable
CVE-2026-45186NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.8.1-1.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2023-5156NONE0
glibc
2.32-11.ph4
fixed in 2.32-14.ph4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-37370NONE0
krb5
1.17-7.ph4
fixed in 1.17-12.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2020-22218NONE0
libssh2
1.9.0-5.ph4
fixed in 1.11.0-1.ph4
0.9%
Theoretical Threat
Not Applicable
CVE-2024-25062NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-13.ph4
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-27113NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-15.ph4
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-32414NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-17.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-32415NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-16.ph4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-6021NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-18.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-0743NONE0
nss-libs
3.72-2.ph4
fixed in 3.72-6.ph4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-32952NONE0
github.com/Azure/go-ntlmssp
v0.0.0-20200615164410-66371956d46c
fixed in 0.1.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2024-55885NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.3.4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-35172NONE0
github.com/distribution/distribution
v2.8.1+incompatible
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-41567NONE0
github.com/docker/docker
v20.10.17+incompatible
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2024-29018NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 26.0.0-rc3, 25.0.5, 23.0.11
0.8%
Theoretical Threat
Not Applicable
CVE-2025-30204NONE0
github.com/golang-jwt/jwt/v4
v4.2.0
fixed in 4.5.2
0.7%
Theoretical Threat
Not Applicable
CVE-2026-32286NONE0
github.com/jackc/pgproto3/v2
v2.1.1
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-65637NONE0
github.com/sirupsen/logrus
v1.8.1
fixed in 1.8.3, 1.9.1, 1.9.3
0.6%
Theoretical Threat
Not Applicable
CVE-2023-45142NONE0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
v0.22.0
fixed in 0.44.0
1.4%
Low-Moderate Risk
Not Applicable
CVE-2026-39882NONE0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
v1.3.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22869NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.35.0
0.9%
Theoretical Threat
Not Applicable
CVE-2025-47913NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.43.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39829NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39830NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39835NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-46597NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2022-41723NONE0
golang.org/x/net
v0.2.0
fixed in 0.7.0
4.6%
Low-Moderate Risk
Not Applicable
CVE-2023-39325NONE0
golang.org/x/net
v0.2.0
fixed in 0.17.0
3.8%
Low-Moderate Risk
Not Applicable
CVE-2023-45288NONE0
golang.org/x/net
v0.2.0
fixed in 0.23.0
92.0%
Actively Exploited
Not Applicable
CVE-2024-45338NONE0
golang.org/x/net
v0.2.0
fixed in 0.33.0
0.9%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
golang.org/x/net
v0.2.0
fixed in 0.53.0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-22868NONE0
golang.org/x/oauth2
v0.0.0-20220223155221-ee480838109b
fixed in 0.27.0
0.8%
Theoretical Threat
Not Applicable
CVE-2024-26147NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.14.2
0.9%
Theoretical Threat
Not Applicable
CVE-2022-23524NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.10.3
0.8%
Theoretical Threat
Not Applicable
CVE-2022-23525NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.10.3
0.8%
Theoretical Threat
Not Applicable
CVE-2022-23526NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.10.3
0.8%
Theoretical Threat
Not Applicable
CVE-2022-41722NONE0
stdlib
v1.19.4
fixed in 1.19.6, 1.20.1
1.7%
Low-Moderate Risk
Not Applicable
CVE-2022-41723NONE0
stdlib
v1.19.4
fixed in 1.19.6, 1.20.1
4.6%
Low-Moderate Risk
Not Applicable
CVE-2022-41724NONE0
stdlib
v1.19.4
fixed in 1.19.6, 1.20.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2022-41725NONE0
stdlib
v1.19.4
fixed in 1.19.6, 1.20.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2023-24534NONE0
stdlib
v1.19.4
fixed in 1.19.8, 1.20.3
1.9%
Low-Moderate Risk
Not Applicable
CVE-2023-24536NONE0
stdlib
v1.19.4
fixed in 1.19.8, 1.20.3
1.5%
Low-Moderate Risk
Not Applicable
CVE-2023-24537NONE0
stdlib
v1.19.4
fixed in 1.19.8, 1.20.3
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-39325NONE0
stdlib
v1.19.4
fixed in 1.20.10, 1.21.3
3.8%
Low-Moderate Risk
Not Applicable
CVE-2023-45283NONE0
stdlib
v1.19.4
fixed in 1.20.11, 1.21.4, 1.20.12, 1.21.5
2.8%
Low-Moderate Risk
Not Applicable
CVE-2023-45287NONE0
stdlib
v1.19.4
fixed in 1.20.0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-45288NONE0
stdlib
v1.19.4
fixed in 1.21.9, 1.22.2
92.0%
Actively Exploited
Not Applicable
CVE-2024-34156NONE0
stdlib
v1.19.4
fixed in 1.22.7, 1.23.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.19.4
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.19.4
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.19.4
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.19.4
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.19.4
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.19.4
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.19.4
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.19.4
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.19.4
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42508NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2022-46908NONE0
sqlite-libs
3.38.5-1.ph4
fixed in 3.38.5-2.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2023-7104NONE0
sqlite-libs
3.38.5-1.ph4
fixed in 3.38.5-4.ph4
1.2%
Low-Moderate Risk
Not Applicable
CVE-2023-24539NONE0
stdlib
v1.19.4
fixed in 1.19.9, 1.20.4
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-29400NONE0
stdlib
v1.19.4
fixed in 1.19.9, 1.20.4
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-42306NONE0
github.com/docker/docker
v20.10.17+incompatible
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-46595NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-4802NONE0
glibc
2.32-11.ph4
fixed in 2.32-21.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2025-47907NONE0
stdlib
v1.19.4
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-13034NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2025-14819NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2026-1965NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-1.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2023-28841NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 20.10.24, 23.0.3
0.7%
Theoretical Threat
Not Applicable
CVE-2023-28842NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 20.10.24, 23.0.3
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-4673NONE0
stdlib
v1.19.4
fixed in 1.23.10, 1.24.4
0.6%
Theoretical Threat
Not Applicable
CVE-2023-23915NONE0
curl-libs
7.86.0-1.ph4
fixed in 7.86.0-4.ph4
0.9%
Theoretical Threat
Not Applicable
CVE-2023-23916NONE0
curl-libs
7.86.0-1.ph4
fixed in 7.86.0-4.ph4
1.7%
Low-Moderate Risk
Not Applicable
CVE-2023-46218NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.7.1-1.ph4
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-7264NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.7.1-3.ph4
17.3%
High Exploitation Risk
Not Applicable
CVE-2024-8096NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.12.0-1.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2024-9681NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.7.1-4.ph4
2.0%
Low-Moderate Risk
Not Applicable
CVE-2025-14524NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-4947NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-3784NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-1.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-5545NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6429NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2025-24528NONE0
krb5
1.17-7.ph4
fixed in 1.17-15.ph4
0.6%
Theoretical Threat
Not Applicable
CVE-2023-28484NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-8.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-29469NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-8.ph4
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-39615NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-11.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2023-45322NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-12.ph4
0.8%
Theoretical Threat
Not Applicable
CVE-2023-5388NONE0
nss-libs
3.72-2.ph4
fixed in 3.72-5.ph4
0.8%
Theoretical Threat
Not Applicable
CVE-2022-23471NONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.5.16, 1.6.12
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-41888NONE0
github.com/distribution/distribution
v2.8.1+incompatible
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39827NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39834NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-22872NONE0
golang.org/x/net
v0.2.0
fixed in 0.38.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25680NONE0
golang.org/x/net
v0.2.0
fixed in 0.55.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-32386NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.17.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-32387NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.17.3
0.5%
Theoretical Threat
Not Applicable
CVE-2025-55198NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.18.5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-55199NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.18.5
0.3%
Theoretical Threat
Not Applicable
CVE-2023-29406NONE0
stdlib
v1.19.4
fixed in 1.19.11, 1.20.6
1.5%
Low-Moderate Risk
Not Applicable
CVE-2024-24785NONE0
stdlib
v1.19.4
fixed in 1.21.8, 1.22.1
0.8%
Theoretical Threat
Not Applicable
CVE-2025-47906NONE0
stdlib
v1.19.4
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.19.4
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2024-25620NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.14.1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.19.4
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2022-36109NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 20.10.18
0.8%
Theoretical Threat
Not Applicable
CVE-2023-3978NONE0
golang.org/x/net
v0.2.0
fixed in 0.13.0
0.9%
Theoretical Threat
Not Applicable
CVE-2026-42502NONE0
golang.org/x/net
v0.2.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2023-39318NONE0
stdlib
v1.19.4
fixed in 1.20.8, 1.21.1
0.8%
Theoretical Threat
Not Applicable
CVE-2023-39319NONE0
stdlib
v1.19.4
fixed in 1.20.8, 1.21.1
0.8%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.19.4
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2022-43552NONE0
curl-libs
7.86.0-1.ph4
fixed in 7.86.0-3.ph4
2.5%
Low-Moderate Risk
Not Applicable
CVE-2023-27535NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
1.6%
Low-Moderate Risk
Not Applicable
CVE-2023-27536NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
1.6%
Low-Moderate Risk
Not Applicable
CVE-2023-28320NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.2-1.ph4
2.7%
Low-Moderate Risk
Not Applicable
CVE-2025-10966NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2024-11053NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.12.0-1.ph4
1.4%
Low-Moderate Risk
Not Applicable
CVE-2024-50602NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-4.ph4
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-15281NONE0
glibc
2.32-11.ph4
fixed in 2.32-22.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2023-4806NONE0
glibc
2.32-11.ph4
fixed in 2.32-14.ph4
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-4813NONE0
glibc
2.32-11.ph4
fixed in 2.32-13.ph4
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-26461NONE0
krb5
1.17-7.ph4
fixed in 1.17-11.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-26458NONE0
krb5
1.17-7.ph4
fixed in 1.17-11.ph4
0.8%
Theoretical Threat
Not Applicable
CVE-2023-48795NONE0
libssh2
1.9.0-5.ph4
fixed in 1.11.0-2.ph4
93.3%
Actively Exploited
Not Applicable
CVE-2023-48795NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.17.0
93.3%
Actively Exploited
Not Applicable
CVE-2024-24786NONE0
google.golang.org/protobuf
v1.28.1
fixed in 1.33.0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-24783NONE0
stdlib
v1.19.4
fixed in 1.21.8, 1.22.1
0.7%
Theoretical Threat
Not Applicable
CVE-2024-24791NONE0
stdlib
v1.19.4
fixed in 1.21.12, 1.22.5
1.4%
Low-Moderate Risk
Not Applicable
CVE-2024-34155NONE0
stdlib
v1.19.4
fixed in 1.22.7, 1.23.1
0.8%
Theoretical Threat
Not Applicable
CVE-2024-34158NONE0
stdlib
v1.19.4
fixed in 1.22.7, 1.23.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2024-45336NONE0
stdlib
v1.19.4
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-3783NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-1.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
Linux-PAM
1.4.0-6.ph4
fixed in 1.5.3-2.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2023-27538NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.0.1-1.ph4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2021-33294NONE0
elfutils-libelf
0.181-6.ph4
fixed in 0.181-7.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-1377NONE0
elfutils-libelf
0.181-6.ph4
fixed in 0.181-8.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2023-52426NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.4.9-1.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32776NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.7.5-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32777NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.7.5-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32778NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.7.5-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2025-0395NONE0
glibc
2.32-11.ph4
fixed in 2.32-22.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2024-34459NONE0
libxml2
2.9.12-7.ph4
fixed in 2.9.12-14.ph4
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-29088NONE0
sqlite-libs
3.38.5-1.ph4
fixed in 3.38.5-5.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2023-25153NONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.5.18, 1.6.18
0.4%
Theoretical Threat
Not Applicable
CVE-2025-64329NONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.7.29
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39833NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-24789NONE0
stdlib
v1.19.4
fixed in 1.21.11, 1.22.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.19.4
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42506NONE0
golang.org/x/net
v0.2.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2024-24784NONE0
stdlib
v1.19.4
fixed in 1.21.8, 1.22.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-22871NONE0
stdlib
v1.19.4
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.19.4
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.19.4
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-9086NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-46219NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.7.1-1.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-4873NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6253NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.19.0-2.ph4
0.7%
Theoretical Threat
Not Applicable
CVE-2026-7168NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.20.0-1.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2024-2004NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.2-8.ph4
1.7%
Low-Moderate Risk
Not Applicable
CVE-2025-59375NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.7.3-1.ph4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-0915NONE0
glibc
2.32-11.ph4
fixed in 2.32-22.ph4
0.6%
Theoretical Threat
Not Applicable
CVE-2024-33600NONE0
glibc
2.32-11.ph4
fixed in 2.32-18.ph4
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-47914NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58181NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.45.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46598NONE0
golang.org/x/crypto
v0.1.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2022-41717NONE0
golang.org/x/net
v0.2.0
fixed in 0.4.0
5.6%
Low-Moderate Risk
Not Applicable
CVE-2025-47911NONE0
golang.org/x/net
v0.2.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58190NONE0
golang.org/x/net
v0.2.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2023-24532NONE0
stdlib
v1.19.4
fixed in 1.19.7, 1.20.2
0.8%
Theoretical Threat
Not Applicable
CVE-2023-29409NONE0
stdlib
v1.19.4
fixed in 1.19.12, 1.20.7, 1.21.0-rc.4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-39326NONE0
stdlib
v1.19.4
fixed in 1.20.12, 1.21.5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2023-45284NONE0
stdlib
v1.19.4
fixed in 1.20.11, 1.21.4
0.9%
Theoretical Threat
Not Applicable
CVE-2023-45289NONE0
stdlib
v1.19.4
fixed in 1.21.8, 1.22.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-45290NONE0
stdlib
v1.19.4
fixed in 1.21.8, 1.22.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-22866NONE0
stdlib
v1.19.4
fixed in 1.22.12, 1.23.6, 1.24.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2025-22873NONE0
stdlib
v1.19.4
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.19.4
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.19.4
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.19.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.19.4
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.19.4
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-54410NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 25.0.13, 28.0.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc
2.32-11.ph4
fixed in 2.32-23.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2025-10148NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
0.5%
Theoretical Threat
Not Applicable
CVE-2025-14017NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.1%
Theoretical Threat
Not Applicable
CVE-2025-5025NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.16.0-1.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-15224NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.18.0-1.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-1376NONE0
elfutils-libelf
0.181-6.ph4
fixed in 0.181-8.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
golang.org/x/net
v0.2.0
fixed in 0.36.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-35206NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.20.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
stdlib
v1.19.4
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Not Applicable
CVE-2024-28180NONE0
gopkg.in/square/go-jose.v2
v2.5.1
No fix yet
2.0%
Low-Moderate Risk
Not Applicable
CVE-2023-25165NONE0
helm.sh/helm/v3
v3.10.1
fixed in 3.11.1
0.8%
Theoretical Threat
Not Applicable
CVE-2025-8058NONE0
glibc
2.32-11.ph4
fixed in 2.32-22.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2024-45341NONE0
stdlib
v1.19.4
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-33601NONE0
glibc
2.32-11.ph4
fixed in 2.32-18.ph4
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-33602NONE0
glibc
2.32-11.ph4
fixed in 2.32-18.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-41568NONE0
github.com/docker/docker
v20.10.17+incompatible
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2023-28322NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.1-1.ph4
2.2%
Low-Moderate Risk
Not Applicable
CVE-2023-38546NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.1.2-6.ph4
6.2%
Low-Moderate Risk
Not Applicable
CVE-2026-41080NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.8.0-1.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2023-2602NONE0
libcap
2.43-2.ph4
fixed in 2.43-3.ph4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-libs
6.2-6.ph4
fixed in 6.5-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2025-70873NONE0
sqlite-libs
3.38.5-1.ph4
fixed in 3.38.5-7.ph4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-33540NONE0
github.com/distribution/distribution
v2.8.1+incompatible
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-51744NONE0
github.com/golang-jwt/jwt/v4
v4.2.0
fixed in 4.5.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-48978NONE0
oras.land/oras-go
v1.2.0
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-24515NONE0
expat-libs
2.2.9-11.ph4
fixed in 2.7.4-1.ph4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.19.4
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
BDSA-2026-9096NONE0
curl
7.86.0-1.ph4
fixed in 8.20.0-1.ph4
Not Applicable
CVE-2025-0167NONE0
curl
7.86.0-1.ph4
fixed in 8.12.0-1.ph4
0.7%
Theoretical Threat
Not Applicable
BDSA-2026-9096NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.20.0-1.ph4
Not Applicable
CVE-2025-0167NONE0
curl-libs
7.86.0-1.ph4
fixed in 8.12.0-1.ph4
0.7%
Theoretical Threat
Not Applicable
BDSA-2025-0719NONE0
krb5
1.17-7.ph4
fixed in 1.17-15.ph4
Not Applicable
CVE-2025-7709NONE0
sqlite-libs
3.38.5-1.ph4
fixed in 3.38.5-6.ph4
0.3%
Theoretical Threat
Not Applicable
GHSA-7ww5-4wqc-m92cNONE0
github.com/containerd/containerd
v1.6.6
fixed in 1.6.26, 1.7.11
Not Applicable
GHSA-6xv5-86q9-7xr8NONE0
github.com/cyphar/filepath-securejoin
v0.2.3
fixed in 0.2.4
Not Applicable
GHSA-jq35-85cj-fj4pNONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 24.0.7, 23.0.8, 20.10.27
Not Applicable
GHSA-vp35-85q5-9f25NONE0
github.com/docker/docker
v20.10.17+incompatible
fixed in 20.10.20
Not Applicable
CVE-2025-24358NONE0
github.com/gorilla/csrf
v1.6.2
fixed in 1.7.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47909NONE0
github.com/gorilla/csrf
v1.6.2
No fix yet
0.2%
Theoretical Threat
Not Applicable
GHSA-7jwh-3vrq-q3m8NONE0
github.com/jackc/pgproto3/v2
v2.1.1
fixed in 2.3.3
Not Applicable
CVE-2026-2303NONE0
go.mongodb.org/mongo-driver
v1.7.0
fixed in 1.17.7
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.1.0
No fix yet
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.2.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.2.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.4.0
fixed in 0.39.0
0.4%
Theoretical Threat
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.47.0
fixed in 1.82.1
Not Applicable
GHSA-m425-mq94-257gNONE0
google.golang.org/grpc
v1.47.0
fixed in 1.56.3, 1.57.1, 1.58.3
Not Applicable
CVE-2025-0913NONE0
stdlib
v1.19.4
fixed in 1.23.10, 1.24.4
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.