Last scanned:
This image is safe for production use. The provided vulnerability stats show two exposed entries, but none reach severity 6.0 and the maximum exposed severity is 4.5, so they do not change the SAFE verdict. There are no post-exploit-only findings, and no CVE IDs are present in the provided top findings to cite. The image is published by grafana, marked TRUSTED, and pinned by digest. Continue normal production monitoring and routine patching.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-21726 | MEDIUM4.5 | github.com/grafana/loki/v3 v3.0.0-20261020212135-d3b4a2f76bfc fixed in 3.6.4 | 0.4% Theoretical Threat | Directly Exposed |
| DSA-6572-1 | NONE0 | ca-certificates 20250419 fixed in 20250419+deb13u1 | — | Not Applicable |
| GO-2026-5932 | NONE0 | golang.org/x/crypto v0.58.0 No fix yet | — | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.