Vulnerability Reportgrafana/grafana:13.3.0-slim

grafana/grafana:latest-slimgrafana/grafana:13.3-slimgrafana/grafana:13.3.0-slim
digestsha256:a66f098dd9b2e1b5a19287ff176db02d895122488c6e39b3dfcd3fb897039225

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. The scan found one low-severity issue that is reachable in normal operation, but its severity is modest and it does not change the overall assessment. The publisher is verified and the image is pinned by digest, so it is stable and traceable. Routine patching and regular rescanning are still good practice to keep the image current.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

1 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
GO-2026-5932MEDIUM4
golang.org/x/crypto
v0.58.0
No fix yet
—
Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.