Vulnerability Reportinfluxdb:3.12.0-core

influxdb:3.12.0-core
digestsha256:624d69bca6bf6fb174aca5a974e1d96e5c5486994e6ae35bc9b4fe02b9520076

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. The provided stats do show 15 exposed and 35 post-exploit findings, but none reach severity 6.0 or higher, and the maximum severities are 4.17 exposed and 3.17 post-exploit. The image is an official Docker Hub image pinned by digest, which supports supply-chain trust. No CVE IDs are present in the provided top findings, so there is no specific CVE-driven risk to call out. Overall, the low-severity findings do not change the SAFE verdict.

Relevant for influxdb:3.12.0-core

Most CVEs in Go images aren't exploitable

This image is a Go binary — most findings can be ruled out with three commands. How to prove which ones are real.

Read the article

Vulnerabilities

Vulnerability Log

51 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-18374MEDIUM4.17
libc-bin
2.39-0ubuntu8.9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.9
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.39-0ubuntu8.9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.9
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-47273LOW3.17
setuptools
70.3.0
fixed in 78.1.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-59890LOW3.11
setuptools
70.3.0
fixed in 83.0.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.17
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.17
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-86145LOW2.51
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-97687LOW2.48
urllib3
2.7.0
fixed in 2.8.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-86414LOW2.34
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-92388LOW2.34
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-86414LOW2.34
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-92388LOW2.34
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-103111LOW2.33
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-97689LOW2.29
urllib3
2.7.0
fixed in 2.8.0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-89157LOW2.26
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-87862LOW2.22
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-87863LOW2.22
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-87864LOW2.22
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-92389LOW2.22
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-92391LOW2.22
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-87862LOW2.22
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-87863LOW2.22
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-87864LOW2.22
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-92389LOW2.22
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-92391LOW2.22
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89158LOW1.99
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89160LOW1.99
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-94266LOW1.98
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-94266LOW1.98
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-86409LOW1.91
curl
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2026-86409LOW1.91
libcurl4t64
8.5.0-2ubuntu10.15
No fix yet
—
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-89156LOW1.81
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-97688LOW1.62
urllib3
2.7.0
fixed in 2.8.0
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-67693NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88647NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-107161NONE0
libsasl2-2
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-107161NONE0
libsasl2-modules-db
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
GHSA-6v7p-g79w-8964NONE0
msgpack
1.1.2
fixed in 1.2.1
—
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.