Last scanned:
AI verdict failed due to an error.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2021-23840 | CRITICAL9.75 | libcrypto1.1 1.1.1g-r0 fixed in 1.1.1j-r0 | 50.7% Actively Exploited | Directly Exposed |
| CVE-2021-23840 | CRITICAL9.75 | libssl1.1 1.1.1g-r0 fixed in 1.1.1j-r0 | 50.7% Actively Exploited | Directly Exposed |
| CVE-2021-3450 | HIGH8.51 | libcrypto1.1 1.1.1g-r0 fixed in 1.1.1k-r0 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2021-3450 | HIGH8.51 | libssl1.1 1.1.1g-r0 fixed in 1.1.1k-r0 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2021-3449 | HIGH7.67 | libcrypto1.1 1.1.1g-r0 fixed in 1.1.1k-r0 | 62.9% Actively Exploited | Directly Exposed |
| CVE-2021-3449 | HIGH7.67 | libssl1.1 1.1.1g-r0 fixed in 1.1.1k-r0 | 62.9% Actively Exploited | Directly Exposed |
| CVE-2020-1971 | MEDIUM5.9 | libcrypto1.1 1.1.1g-r0 fixed in 1.1.1i-r0 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2021-23841 | MEDIUM5.9 | libcrypto1.1 1.1.1g-r0 fixed in 1.1.1j-r0 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-1971 | MEDIUM5.9 | libssl1.1 1.1.1g-r0 fixed in 1.1.1i-r0 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2021-23841 | MEDIUM5.9 | libssl1.1 1.1.1g-r0 fixed in 1.1.1j-r0 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2021-36159 | MEDIUM5.46 | apk-tools 2.10.4-r2 fixed in 2.10.7-r0 | 2.6% Low-Moderate Risk | Post-Exploit |
| CVE-2020-28928 | MEDIUM4.67 | musl 1.1.22-r3 fixed in 1.1.22-r4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2021-30139 | MEDIUM4.5 | apk-tools 2.10.4-r2 fixed in 2.10.6-r0 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2021-28831 | MEDIUM4.5 | busybox 1.30.1-r3 fixed in 1.30.1-r5 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2021-28831 | MEDIUM4.5 | ssl_client 1.30.1-r3 fixed in 1.30.1-r5 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2021-23839 | LOW3.7 | libcrypto1.1 1.1.1g-r0 fixed in 1.1.1j-r0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2021-23839 | LOW3.7 | libssl1.1 1.1.1g-r0 fixed in 1.1.1j-r0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-28928 | NONE0 | musl-utils 1.1.22-r3 fixed in 1.1.22-r4 | 0.6% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.