Vulnerability Reporthashicorp/vault:1.7.2

hashicorp/vault:1.7.2
digestsha256:879d0f6b9d5bd981f81daef2f9145d84116f8a9533a2dd03955fd2831c7e3d78

Executive Summary

Last scanned:

Threat Score
95/100DANGEROUS
Reputation
TRUSTED

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. With 116 exposed vulnerabilities and 36 rated 7 or higher, an attacker could bypass IP-based checks (CVE-2024-24790) or exhaust memory/CPU via crafted requests, causing service denial (CVE-2023-45288). The dev server is not TLS by default, so HTTP/2-specific DoS requires a TLS listener; however, upgrading the base Go version is the only full mitigation.

Vulnerabilities

Vulnerability Log

158 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2024-24790HIGH7.84
stdlib
v1.15.11
fixed in 1.21.11, 1.22.4
2.0%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2023-45288HIGH7.8
stdlib
v1.15.11
fixed in 1.21.9, 1.22.2
92.0%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2022-23772HIGH7.5
stdlib
v1.15.11
fixed in 1.16.14, 1.17.7
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-24675HIGH7.5
stdlib
v1.15.11
fixed in 1.17.9, 1.18.1
10.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-24921HIGH7.5
stdlib
v1.15.11
fixed in 1.16.15, 1.17.8
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-27664HIGH7.5
stdlib
v1.15.11
fixed in 1.18.6, 1.19.1
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-28131HIGH7.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-28327HIGH7.5
stdlib
v1.15.11
fixed in 1.17.9, 1.18.1
4.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-2879HIGH7.5
stdlib
v1.15.11
fixed in 1.18.7, 1.19.2
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-2880HIGH7.5
stdlib
v1.15.11
fixed in 1.18.7, 1.19.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-29804HIGH7.5
stdlib
v1.15.11
fixed in 1.17.11, 1.18.3
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-30630HIGH7.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30631HIGH7.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30632HIGH7.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30633HIGH7.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-30634HIGH7.5
stdlib
v1.15.11
fixed in 1.17.11, 1.18.3
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-30635HIGH7.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-32189HIGH7.5
stdlib
v1.15.11
fixed in 1.17.13, 1.18.5
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-41715HIGH7.5
stdlib
v1.15.11
fixed in 1.18.7, 1.19.2
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-41720HIGH7.5
stdlib
v1.15.11
fixed in 1.18.9, 1.19.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-41722HIGH7.5
stdlib
v1.15.11
fixed in 1.19.6, 1.20.1
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2022-41723HIGH7.5
stdlib
v1.15.11
fixed in 1.19.6, 1.20.1
4.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-41724HIGH7.5
stdlib
v1.15.11
fixed in 1.19.6, 1.20.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-41725HIGH7.5
stdlib
v1.15.11
fixed in 1.19.6, 1.20.1
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-24534HIGH7.5
stdlib
v1.15.11
fixed in 1.19.8, 1.20.3
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-24536HIGH7.5
stdlib
v1.15.11
fixed in 1.19.8, 1.20.3
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-24537HIGH7.5
stdlib
v1.15.11
fixed in 1.19.8, 1.20.3
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-39325HIGH7.5
stdlib
v1.15.11
fixed in 1.20.10, 1.21.3
3.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-45283HIGH7.5
stdlib
v1.15.11
fixed in 1.20.11, 1.21.4, 1.20.12, 1.21.5
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-45287HIGH7.5
stdlib
v1.15.11
fixed in 1.20.0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-34156HIGH7.5
stdlib
v1.15.11
fixed in 1.22.7, 1.23.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-61726HIGH7.5
stdlib
v1.15.11
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-33195HIGH7.3
stdlib
v1.15.11
fixed in 1.15.13, 1.16.5
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-24539HIGH7.3
stdlib
v1.15.11
fixed in 1.19.9, 1.20.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-29400HIGH7.3
stdlib
v1.15.11
fixed in 1.19.9, 1.20.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-23806HIGH7.28
stdlib
v1.15.11
fixed in 1.16.14, 1.17.7
3.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-68121MEDIUM6.8
stdlib
v1.15.11
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2022-30580MEDIUM6.63
stdlib
v1.15.11
fixed in 1.17.11, 1.18.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-29403MEDIUM6.63
stdlib
v1.15.11
fixed in 1.19.10, 1.20.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39822MEDIUM6.63
stdlib
v1.15.11
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2021-34558MEDIUM6.5
stdlib
v1.15.11
fixed in 1.15.14, 1.16.6
7.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-1705MEDIUM6.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-32148MEDIUM6.5
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-29406MEDIUM6.5
stdlib
v1.15.11
fixed in 1.19.11, 1.20.6
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2022-41716MEDIUM6.38
stdlib
v1.15.11
fixed in 1.18.8, 1.19.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-61729MEDIUM6.38
stdlib
v1.15.11
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-25679MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27145MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-32280MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-32281MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-32283MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33811MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-33814MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39820MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39836MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42499MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42504MEDIUM6.38
stdlib
v1.15.11
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-58183MEDIUM6.38
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-61728MEDIUM6.38
stdlib
v1.15.11
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-44716MEDIUM6
stdlib
v1.15.11
fixed in 1.16.12, 1.17.5
4.0%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-47907MEDIUM5.95
stdlib
v1.15.11
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-31525MEDIUM5.9
stdlib
v1.15.11
fixed in 1.15.12, 1.16.4
3.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-36221MEDIUM5.9
stdlib
v1.15.11
fixed in 1.15.15, 1.16.7
3.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-24791MEDIUM5.9
stdlib
v1.15.11
fixed in 1.21.12, 1.22.5
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2024-34158MEDIUM5.9
stdlib
v1.15.11
fixed in 1.22.7, 1.23.1
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-4673MEDIUM5.78
stdlib
v1.15.11
fixed in 1.23.10, 1.24.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-24785MEDIUM5.52
stdlib
v1.15.11
fixed in 1.21.8, 1.22.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-47906MEDIUM5.52
stdlib
v1.15.11
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-61727MEDIUM5.52
stdlib
v1.15.11
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39825MEDIUM5.52
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-32282MEDIUM5.44
stdlib
v1.15.11
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-24784MEDIUM5.4
stdlib
v1.15.11
fixed in 1.21.8, 1.22.1
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1q-r0
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libssl1.1
1.1.1k-r0
fixed in 1.1.1q-r0
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-33197MEDIUM5.3
stdlib
v1.15.11
fixed in 1.15.13, 1.16.5
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-29526MEDIUM5.3
stdlib
v1.15.11
fixed in 1.17.10, 1.18.2
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-41717MEDIUM5.3
stdlib
v1.15.11
fixed in 1.18.9, 1.19.4
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-29409MEDIUM5.3
stdlib
v1.15.11
fixed in 1.19.12, 1.20.7, 1.21.0-rc.4
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-39326MEDIUM5.3
stdlib
v1.15.11
fixed in 1.20.12, 1.21.5
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-45289MEDIUM5.3
stdlib
v1.15.11
fixed in 1.21.8, 1.22.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-45290MEDIUM5.3
stdlib
v1.15.11
fixed in 1.21.8, 1.22.1
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-39318MEDIUM5.18
stdlib
v1.15.11
fixed in 1.20.8, 1.21.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-39319MEDIUM5.18
stdlib
v1.15.11
fixed in 1.20.8, 1.21.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-32289MEDIUM5.18
stdlib
v1.15.11
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-24783MEDIUM5.02
stdlib
v1.15.11
fixed in 1.21.8, 1.22.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2024-34155MEDIUM5.02
stdlib
v1.15.11
fixed in 1.22.7, 1.23.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-45336MEDIUM5.02
stdlib
v1.15.11
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-44717MEDIUM4.8
stdlib
v1.15.11
fixed in 1.16.12, 1.17.5
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-1962MEDIUM4.67
stdlib
v1.15.11
fixed in 1.17.12, 1.18.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2024-24789MEDIUM4.67
stdlib
v1.15.11
fixed in 1.21.11, 1.22.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-32288MEDIUM4.67
stdlib
v1.15.11
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-22871MEDIUM4.59
stdlib
v1.15.11
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-27142MEDIUM4.59
stdlib
v1.15.11
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39823MEDIUM4.59
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39826MEDIUM4.59
stdlib
v1.15.11
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-3711MEDIUM4.58
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Post-Exploit
CVE-2021-3711MEDIUM4.58
libssl1.1
1.1.1k-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Post-Exploit
CVE-2023-24532MEDIUM4.5
stdlib
v1.15.11
fixed in 1.19.7, 1.20.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-45284MEDIUM4.5
stdlib
v1.15.11
fixed in 1.20.11, 1.21.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2025-22866MEDIUM4.5
stdlib
v1.15.11
fixed in 1.22.12, 1.23.6, 1.24.0-rc.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-22873MEDIUM4.5
stdlib
v1.15.11
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-47912MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58185MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-58187MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58188MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58189MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-61723MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61724MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-61725MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61730MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42505MEDIUM4.5
stdlib
v1.15.11
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42507MEDIUM4.5
stdlib
v1.15.11
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58186MEDIUM4.5
stdlib
v1.15.11
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2021-42381MEDIUM4.32
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42382MEDIUM4.32
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42383MEDIUM4.32
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42384MEDIUM4.32
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42385MEDIUM4.32
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42386MEDIUM4.32
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42381MEDIUM4.32
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42382MEDIUM4.32
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42383MEDIUM4.32
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42384MEDIUM4.32
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42385MEDIUM4.32
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42386MEDIUM4.32
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-37434MEDIUM4.06
zlib
1.2.11-r3
fixed in 1.2.12-r2
15.5%
High Exploitation Risk
Post-Exploit
CVE-2025-22870LOW3.74
stdlib
v1.15.11
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-45341LOW3.57
stdlib
v1.15.11
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-24538LOW3.53
stdlib
v1.15.11
fixed in 1.19.8, 1.20.3
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-24540LOW3.53
stdlib
v1.15.11
fixed in 1.19.9, 1.20.4
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-0778LOW3.51
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1n-r0
70.6%
Actively Exploited
Post-Exploit
CVE-2022-0778LOW3.51
libssl1.1
1.1.1k-r0
fixed in 1.1.1n-r0
70.6%
Actively Exploited
Post-Exploit
CVE-2018-25032LOW3.51
zlib
1.2.11-r3
fixed in 1.2.12-r0
52.1%
Actively Exploited
Post-Exploit
CVE-2021-3712LOW3.46
libcrypto1.1
1.1.1k-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Post-Exploit
CVE-2021-3712LOW3.46
libssl1.1
1.1.1k-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Post-Exploit
CVE-2021-36159LOW3.28
apk-tools
2.12.5-r0
fixed in 2.12.6-r0
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-28391LOW3.17
busybox
1.32.1-r6
fixed in 1.32.1-r8
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-28391LOW3.17
ssl_client
1.32.1-r6
fixed in 1.32.1-r8
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-30065LOW2.81
busybox
1.32.1-r6
fixed in 1.32.1-r9
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-30065LOW2.81
ssl_client
1.32.1-r6
fixed in 1.32.1-r9
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2021-42375LOW2.8
busybox
1.32.1-r6
fixed in 1.32.1-r7
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-42375LOW2.8
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-33196LOW2.7
stdlib
v1.15.11
fixed in 1.15.13, 1.16.5
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-33198LOW2.7
stdlib
v1.15.11
fixed in 1.15.13, 1.16.5
3.4%
Low-Moderate Risk
Post-Exploit
CVE-2021-39293LOW2.7
stdlib
v1.15.11
fixed in 1.16.8, 1.17.1
6.9%
Low-Moderate Risk
Post-Exploit
CVE-2021-41771LOW2.7
stdlib
v1.15.11
fixed in 1.16.10, 1.17.3
4.4%
Low-Moderate Risk
Post-Exploit
CVE-2021-41772LOW2.7
stdlib
v1.15.11
fixed in 1.16.10, 1.17.3
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42374LOW2.7
busybox
1.32.1-r6
fixed in 1.32.1-r7
0.6%
Theoretical Threat
Post-Exploit
CVE-2021-42374LOW2.7
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-30629LOW2.63
stdlib
v1.15.11
fixed in 1.17.11, 1.18.3
0.9%
Theoretical Threat
Directly Exposed
CVE-2021-42378LOW2.59
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42379LOW2.59
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42380LOW2.59
busybox
1.32.1-r6
fixed in 1.32.1-r7
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42378LOW2.59
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-42379LOW2.59
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2021-42380LOW2.59
ssl_client
1.32.1-r6
fixed in 1.32.1-r7
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2026-27139LOW2.12
stdlib
v1.15.11
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-0913NONE0
stdlib
v1.15.11
fixed in 1.23.10, 1.24.4
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.