Vulnerability Reportgrafana/synthetic-monitoring-agent:sha-7abbf6d

grafana/synthetic-monitoring-agent:sha-7abbf6dgrafana/synthetic-monitoring-agent:v0.68.0
digestsha256:c96c36aedb9c8b46d437b0bff2434bb17a94b6a80c592069d75a71cdcd70292f

Executive Summary

Last scanned:

Threat Score
28/100NEEDS ATTENTION
Reputation
TRUSTED

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main finding, CVE-2026-78669, could let a hostile HTTP/2 target drive excessive CPU use and slow monitoring checks, but it is a denial-of-service issue rather than code execution or data exposure. Note: CVE-2026-78669 only applies when the agent performs HTTP/2 probes against a malicious target, so its relevance depends on how the agent is configured in your deployment. The image comes from a verified publisher and is pinned by digest, which supports a production decision once the remaining findings are reviewed and patched.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

7 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-78669MEDIUM6
golang.org/x/net
v0.58.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-78659MEDIUM4.5
golang.org/x/net
v0.58.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-78660MEDIUM4.5
golang.org/x/net
v0.58.0
fixed in 0.60.0
0.4%
Theoretical Threat
Directly Exposed
GO-2026-5932MEDIUM4
golang.org/x/crypto
v0.58.0
No fix yet
—
Directly Exposed
GO-2026-5932MEDIUM4
golang.org/x/crypto
v0.56.0
No fix yet
—
Directly Exposed
CVE-2026-97032LOW3.54
golang.org/x/net
v0.58.0
fixed in 0.60.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-78663LOW3.18
golang.org/x/net
v0.58.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.