Vulnerability Reporthaproxy:3.0.28-alpine

haproxy:3.0.28-alpine3.24haproxy:3.0.28-alpine

digestsha256:ed51796ef581b00aac83d547c7f76366bfe6660b7bec85c5059ca68123444d66

Executive Summary

Last scanned: Oct 21, 2026

Threat ScoreSAFE• Pre-calculated threat score is 0, which falls in the SAFE band.• Image is from Docker Official publisher with TRUSTED verdict and trust score 100, and is pinned by digest for immutability.• Vulnerability stats report exposed_total 1 and post_total 1, so some items exist, but none are high severity.• Exposed max severity is 0.0 and post-exploit max severity is 2.33; exposed_count_ge6, exposed_count_ge7, and post_count_ge6 are all 0.• No exposed or post-exploit findings with CVE IDs were provided, so no specific CVE is cited as a production risk.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The image is an official Docker image pinned by digest, and the pre-calculated threat score is 0. The vulnerability stats show one exposed item and one post-exploit-only item, but neither reaches the 6.0 severity threshold and the maximum observed severities are 0.0 and 2.33. No CVE details were provided in the top findings to indicate a practical production risk.

Vulnerabilities

Vulnerability Log

2 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-103111	LOW2.33	pcre2 10.48-r0 fixed in 10.49-r0	0.2% Theoretical Threat	Post-Exploit
CVE-2026-85091	NONE0	zlib 1.3.2-r0 fixed in 1.3.2-r1	0.4% Theoretical Threat	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.