Vulnerability Reporthashicorp/vault:1.6.6

hashicorp/vault:1.6.6
digestsha256:510de67127092c7292de5b952c30b3a199def3c6c6ef264dfb76ea3114b28922

Executive Summary

Last scanned:

Threat Score
95/100DANGEROUS
Reputation
TRUSTED

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could remotely trigger denial-of-service against the Vault API (CVE-2023-45288) or crash the container through OpenSSL vulnerabilities (CVE-2023-0215), undermining availability. Note that CVE-2023-45288 may only be reachable if the API listener is configured for HTTP/2, so restricting network access or disabling HTTP/2 can reduce exposure, but the image still contains many unresolved high-severity issues. Due to the large number of vulnerable packages and high severity, immediate remediation by updating the base image is mandatory.

Vulnerabilities

Vulnerability Log

161 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2023-45288HIGH7.8
stdlib
v1.15.15
fixed in 1.21.9, 1.22.2
92.0%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2023-0215HIGH7.5
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1t-r0
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-0464HIGH7.5
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1t-r1
3.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-0215HIGH7.5
libssl1.1
1.1.1k-r0
fixed in 1.1.1t-r0
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-0464HIGH7.5
libssl1.1
1.1.1k-r0
fixed in 1.1.1t-r1
3.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-41771HIGH7.5
stdlib
v1.15.15
fixed in 1.16.10, 1.17.3
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-41772HIGH7.5
stdlib
v1.15.15
fixed in 1.16.10, 1.17.3
3.1%
Low-Moderate Risk
Directly Exposed
CVE-2021-44716HIGH7.5
stdlib
v1.15.15
fixed in 1.16.12, 1.17.5
4.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-23772HIGH7.5
stdlib
v1.15.15
fixed in 1.16.14, 1.17.7
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-24675HIGH7.5
stdlib
v1.15.15
fixed in 1.17.9, 1.18.1
10.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-24921HIGH7.5
stdlib
v1.15.15
fixed in 1.16.15, 1.17.8
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-27664HIGH7.5
stdlib
v1.15.15
fixed in 1.18.6, 1.19.1
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-28131HIGH7.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-28327HIGH7.5
stdlib
v1.15.15
fixed in 1.17.9, 1.18.1
4.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-2879HIGH7.5
stdlib
v1.15.15
fixed in 1.18.7, 1.19.2
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-2880HIGH7.5
stdlib
v1.15.15
fixed in 1.18.7, 1.19.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-29804HIGH7.5
stdlib
v1.15.15
fixed in 1.17.11, 1.18.3
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-30630HIGH7.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30631HIGH7.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30632HIGH7.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30633HIGH7.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30634HIGH7.5
stdlib
v1.15.15
fixed in 1.17.11, 1.18.3
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-30635HIGH7.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-32189HIGH7.5
stdlib
v1.15.15
fixed in 1.17.13, 1.18.5
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-41715HIGH7.5
stdlib
v1.15.15
fixed in 1.18.7, 1.19.2
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-41720HIGH7.5
stdlib
v1.15.15
fixed in 1.18.9, 1.19.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-41722HIGH7.5
stdlib
v1.15.15
fixed in 1.19.6, 1.20.1
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2022-41723HIGH7.5
stdlib
v1.15.15
fixed in 1.19.6, 1.20.1
4.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-41724HIGH7.5
stdlib
v1.15.15
fixed in 1.19.6, 1.20.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-41725HIGH7.5
stdlib
v1.15.15
fixed in 1.19.6, 1.20.1
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-24534HIGH7.5
stdlib
v1.15.15
fixed in 1.19.8, 1.20.3
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-24536HIGH7.5
stdlib
v1.15.15
fixed in 1.19.8, 1.20.3
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-24537HIGH7.5
stdlib
v1.15.15
fixed in 1.19.8, 1.20.3
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-39325HIGH7.5
stdlib
v1.15.15
fixed in 1.20.10, 1.21.3
3.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-45283HIGH7.5
stdlib
v1.15.15
fixed in 1.20.11, 1.21.4, 1.20.12, 1.21.5
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-45287HIGH7.5
stdlib
v1.15.15
fixed in 1.20.0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-34156HIGH7.5
stdlib
v1.15.15
fixed in 1.22.7, 1.23.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-61726HIGH7.5
stdlib
v1.15.15
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-24539HIGH7.3
stdlib
v1.15.15
fixed in 1.19.9, 1.20.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-29400HIGH7.3
stdlib
v1.15.15
fixed in 1.19.9, 1.20.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-23806HIGH7.28
stdlib
v1.15.15
fixed in 1.16.14, 1.17.7
3.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-68121MEDIUM6.8
stdlib
v1.15.15
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2022-4304MEDIUM6.79
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1t-r0
16.2%
High Exploitation Risk
Directly Exposed
CVE-2022-4304MEDIUM6.79
libssl1.1
1.1.1k-r0
fixed in 1.1.1t-r0
16.2%
High Exploitation Risk
Directly Exposed
CVE-2022-30580MEDIUM6.63
stdlib
v1.15.15
fixed in 1.17.11, 1.18.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-29403MEDIUM6.63
stdlib
v1.15.15
fixed in 1.19.10, 1.20.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39822MEDIUM6.63
stdlib
v1.15.15
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-1705MEDIUM6.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-32148MEDIUM6.5
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-29406MEDIUM6.5
stdlib
v1.15.15
fixed in 1.19.11, 1.20.6
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2022-41716MEDIUM6.38
stdlib
v1.15.15
fixed in 1.18.8, 1.19.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-61729MEDIUM6.38
stdlib
v1.15.15
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-25679MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27145MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-32280MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-32281MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-32283MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33811MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-33814MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39820MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39836MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42499MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42504MEDIUM6.38
stdlib
v1.15.15
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-58183MEDIUM6.38
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-61728MEDIUM6.38
stdlib
v1.15.15
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-47907MEDIUM5.95
stdlib
v1.15.15
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-24791MEDIUM5.9
stdlib
v1.15.15
fixed in 1.21.12, 1.22.5
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2024-34158MEDIUM5.9
stdlib
v1.15.15
fixed in 1.22.7, 1.23.1
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-24538MEDIUM5.88
stdlib
v1.15.15
fixed in 1.19.8, 1.20.3
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-24540MEDIUM5.88
stdlib
v1.15.15
fixed in 1.19.9, 1.20.4
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-24790MEDIUM5.88
stdlib
v1.15.15
fixed in 1.21.11, 1.22.4
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-4673MEDIUM5.78
stdlib
v1.15.15
fixed in 1.23.10, 1.24.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-24785MEDIUM5.52
stdlib
v1.15.15
fixed in 1.21.8, 1.22.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-47906MEDIUM5.52
stdlib
v1.15.15
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-61727MEDIUM5.52
stdlib
v1.15.15
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39825MEDIUM5.52
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-32282MEDIUM5.44
stdlib
v1.15.15
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-24784MEDIUM5.4
stdlib
v1.15.15
fixed in 1.21.8, 1.22.1
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1q-r0
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-0465MEDIUM5.3
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1t-r2
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libssl1.1
1.1.1k-r0
fixed in 1.1.1q-r0
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-0465MEDIUM5.3
libssl1.1
1.1.1k-r0
fixed in 1.1.1t-r2
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-29526MEDIUM5.3
stdlib
v1.15.15
fixed in 1.17.10, 1.18.2
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-41717MEDIUM5.3
stdlib
v1.15.15
fixed in 1.18.9, 1.19.4
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-29409MEDIUM5.3
stdlib
v1.15.15
fixed in 1.19.12, 1.20.7, 1.21.0-rc.4
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-39326MEDIUM5.3
stdlib
v1.15.15
fixed in 1.20.12, 1.21.5
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-45289MEDIUM5.3
stdlib
v1.15.15
fixed in 1.21.8, 1.22.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-45290MEDIUM5.3
stdlib
v1.15.15
fixed in 1.21.8, 1.22.1
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-39318MEDIUM5.18
stdlib
v1.15.15
fixed in 1.20.8, 1.21.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-39319MEDIUM5.18
stdlib
v1.15.15
fixed in 1.20.8, 1.21.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-32289MEDIUM5.18
stdlib
v1.15.15
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-24783MEDIUM5.02
stdlib
v1.15.15
fixed in 1.21.8, 1.22.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2024-34155MEDIUM5.02
stdlib
v1.15.15
fixed in 1.22.7, 1.23.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-45336MEDIUM5.02
stdlib
v1.15.15
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-44717MEDIUM4.8
stdlib
v1.15.15
fixed in 1.16.12, 1.17.5
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-1962MEDIUM4.67
stdlib
v1.15.15
fixed in 1.17.12, 1.18.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2024-24789MEDIUM4.67
stdlib
v1.15.15
fixed in 1.21.11, 1.22.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-32288MEDIUM4.67
stdlib
v1.15.15
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-22871MEDIUM4.59
stdlib
v1.15.15
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-27142MEDIUM4.59
stdlib
v1.15.15
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39823MEDIUM4.59
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39826MEDIUM4.59
stdlib
v1.15.15
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-3711MEDIUM4.58
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Post-Exploit
CVE-2021-3711MEDIUM4.58
libssl1.1
1.1.1k-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Post-Exploit
CVE-2023-24532MEDIUM4.5
stdlib
v1.15.15
fixed in 1.19.7, 1.20.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-45284MEDIUM4.5
stdlib
v1.15.15
fixed in 1.20.11, 1.21.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2025-22866MEDIUM4.5
stdlib
v1.15.15
fixed in 1.22.12, 1.23.6, 1.24.0-rc.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-22873MEDIUM4.5
stdlib
v1.15.15
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-47912MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58185MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-58187MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58188MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58189MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-61723MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61724MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-61725MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61730MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42505MEDIUM4.5
stdlib
v1.15.15
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42507MEDIUM4.5
stdlib
v1.15.15
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58186MEDIUM4.5
stdlib
v1.15.15
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2021-42382MEDIUM4.32
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42383MEDIUM4.32
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42384MEDIUM4.32
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42385MEDIUM4.32
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42386MEDIUM4.32
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42382MEDIUM4.32
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42383MEDIUM4.32
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42384MEDIUM4.32
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42385MEDIUM4.32
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42386MEDIUM4.32
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-37434MEDIUM4.06
zlib
1.2.11-r3
fixed in 1.2.12-r2
15.5%
High Exploitation Risk
Post-Exploit
CVE-2025-22870LOW3.74
stdlib
v1.15.15
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-45341LOW3.57
stdlib
v1.15.15
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0778LOW3.51
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1n-r0
70.6%
Actively Exploited
Post-Exploit
CVE-2022-0778LOW3.51
libretls
3.3.3p1-r2
fixed in 3.3.3p1-r3
70.6%
Actively Exploited
Post-Exploit
CVE-2022-0778LOW3.51
libssl1.1
1.1.1k-r0
fixed in 1.1.1n-r0
70.6%
Actively Exploited
Post-Exploit
CVE-2018-25032LOW3.51
zlib
1.2.11-r3
fixed in 1.2.12-r0
52.1%
Actively Exploited
Post-Exploit
CVE-2021-3712LOW3.46
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Post-Exploit
CVE-2023-0286LOW3.46
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1t-r0
59.5%
Actively Exploited
Post-Exploit
CVE-2021-3712LOW3.46
libssl1.1
1.1.1k-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Post-Exploit
CVE-2023-0286LOW3.46
libssl1.1
1.1.1k-r0
fixed in 1.1.1t-r0
59.5%
Actively Exploited
Post-Exploit
CVE-2022-28391LOW3.17
busybox
1.33.1-r3
fixed in 1.33.1-r7
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-28391LOW3.17
ssl_client
1.33.1-r3
fixed in 1.33.1-r7
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-4450LOW3.1
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1t-r0
20.4%
High Exploitation Risk
Post-Exploit
CVE-2022-4450LOW3.1
libssl1.1
1.1.1k-r0
fixed in 1.1.1t-r0
20.4%
High Exploitation Risk
Post-Exploit
CVE-2021-42375LOW2.8
busybox
1.33.1-r3
fixed in 1.33.1-r5
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-42375LOW2.8
ssl_client
1.33.1-r3
fixed in 1.33.1-r5
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-39293LOW2.7
stdlib
v1.15.15
fixed in 1.16.8, 1.17.1
6.9%
Low-Moderate Risk
Post-Exploit
CVE-2021-42374LOW2.7
busybox
1.33.1-r3
fixed in 1.33.1-r4
0.6%
Theoretical Threat
Post-Exploit
CVE-2021-42374LOW2.7
ssl_client
1.33.1-r3
fixed in 1.33.1-r4
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-30629LOW2.63
stdlib
v1.15.15
fixed in 1.17.11, 1.18.3
0.9%
Theoretical Threat
Directly Exposed
CVE-2021-42378LOW2.59
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42379LOW2.59
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42380LOW2.59
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42381LOW2.59
busybox
1.33.1-r3
fixed in 1.33.1-r6
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42378LOW2.59
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42379LOW2.59
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42380LOW2.59
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42381LOW2.59
ssl_client
1.33.1-r3
fixed in 1.33.1-r6
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-27139LOW2.12
stdlib
v1.15.15
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-0913NONE0
stdlib
v1.15.15
fixed in 1.23.10, 1.24.4
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.