Vulnerability Reporthaproxy:2.8.30-alpine

haproxy:2.8.30-alpine3.24haproxy:2.8.30-alpine
digestsha256:1cb3b38bd67e1733c9f1a7c24e7e14809b23a711ae90f211a9eb0e6003d909fd

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. It is an official Docker Hub image pinned by digest, and the pre-calculated threat score of 0 places it in the SAFE band. Although the provided stats show 1 exposed item and 1 post-exploit item, the exposed maximum severity is 0.0 and the post-exploit maximum severity is 2.33, with no items at severity 6.0 or higher. The top-findings lists contain no CVE IDs, so there are no specific vulnerabilities from the provided inputs that require remediation in this container.

Vulnerabilities

Vulnerability Log

2 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-103111LOW2.33
pcre2
10.48-r0
fixed in 10.49-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-85091NONE0
zlib
1.3.2-r0
fixed in 1.3.2-r1
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.