Vulnerability Reporthaproxy:3.4.4-alpine

haproxy:3.4.4-alpine
digestsha256:52c5921e1619f39cbd5b25e1b4b5847667917f39745056cf004d9c263fbf11b9

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. It is an official Docker image pinned by digest, and its pre-calculated threat score is 0. One exposed-surface item and one post-exploit-only item are reported, but neither reaches severity 6.0: exposed max severity is 0.0 and post-exploit max severity is 2.33. Because no high-severity findings or CVE IDs are present in the provided top findings, the practical risk for production use is low.

Vulnerabilities

Vulnerability Log

2 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-103111LOW2.33
pcre2
10.48-r0
fixed in 10.49-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-85091NONE0
zlib
1.3.2-r0
fixed in 1.3.2-r1
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.