Last scanned:
This image is safe for production use. Although 8 exposed vulnerabilities are reported, their maximum severity is 4.42 and none meet the 6.0 or 7.0 thresholds, while there are 0 post-exploit findings. Trust is VERIFIED/TRUSTED with publisher grafana and digest pinning, and no CVE IDs were present in the provided top findings.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-81871 | MEDIUM4.42 | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.18.0 fixed in 0.21.0 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-81870 | LOW2.8 | go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 fixed in 1.45.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW2.8 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 fixed in 1.45.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW2.8 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 fixed in 1.45.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW2.8 | go.opentelemetry.io/otel/sdk v1.44.0 fixed in 1.45.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81872 | LOW2.7 | go.opentelemetry.io/otel/sdk/log v0.19.0 fixed in 0.21.0 | 0.4% Theoretical Threat | Directly Exposed |
| DSA-6572-1 | NONE0 | ca-certificates 20250419 fixed in 20250419+deb13u1 | — | Not Applicable |
| GO-2026-5932 | NONE0 | golang.org/x/crypto v0.57.0 No fix yet | — | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.