Vulnerability Reporthaproxy:3.2.24-alpine

haproxy:3.2.24-alpine3.24haproxy:3.2.24-alpine
digestsha256:1aca32ee932b96d2a75f1882909325839dd23c138ba9c6fd26e4d88179f30f13

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. It is an official Docker Hub HAProxy image pinned by digest, with a trusted reputation score of 100. The supplied stats show 1 exposed-surface finding and 1 post-exploit-only finding, but exposed max severity is 0.0 and post-exploit max severity is 2.33, with no findings at severity 6.0 or higher. INPUT 4 and INPUT 5 do not list any CVE IDs, so no specific CVE remediation is identified from those inputs; standard production hardening and monitoring still apply.

Vulnerabilities

Vulnerability Log

2 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-103111LOW2.33
pcre2
10.48-r0
fixed in 10.49-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-85091NONE0
zlib
1.3.2-r0
fixed in 1.3.2-r1
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.