Vulnerability Reportjaegertracing/jaeger:2.3.0

jaegertracing/jaeger:2.3.0
digestsha256:6f578f9f7e3cfadf2f46a3c4ceb52614b8520b519eedcb465d63a08136b5cd24

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

146 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2025-46394LOW1.68
busybox
1.37.0-r9
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox-binsh
1.37.0-r9
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.23.6
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-31789NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.7-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15467NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
47.6%
High Exploitation Risk
Not Applicable
CVE-2026-31789NONE0
libssl3
3.3.2-r4
fixed in 3.3.7-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15467NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
47.6%
High Exploitation Risk
Not Applicable
CVE-2026-33186NONE0
google.golang.org/grpc
v1.70.0
fixed in 1.79.3
1.6%
Low-Moderate Risk
Not Applicable
CVE-2026-39828NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39832NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39821NONE0
golang.org/x/net
v0.34.0
fixed in 0.55.0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-28387NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.7-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28387NONE0
libssl3
3.3.2-r4
fixed in 3.3.7-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39831NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25681NONE0
golang.org/x/net
v0.34.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27136NONE0
golang.org/x/net
v0.34.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40200NONE0
musl
1.2.5-r8
fixed in 1.2.5-r11
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40200NONE0
musl-utils
1.2.5-r8
fixed in 1.2.5-r11
0.2%
Theoretical Threat
Not Applicable
CVE-2026-22184NONE0
zlib
1.3.1-r2
fixed in 1.3.2-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.23.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69421NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28388NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.7-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-69421NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28388NONE0
libssl3
3.3.2-r4
fixed in 3.3.7-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
libssl3
3.3.2-r4
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
libssl3
3.3.2-r4
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-41602NONE0
github.com/apache/thrift
v0.21.0
fixed in 0.23.0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-29786NONE0
github.com/expr-lang/expr
v1.16.9
fixed in 1.17.0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68156NONE0
github.com/expr-lang/expr
v1.16.9
fixed in 1.17.7
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39882NONE0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
v0.10.0
fixed in 0.19.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39882NONE0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
v1.34.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39882NONE0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
v1.34.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22869NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.35.0
0.9%
Theoretical Threat
Not Applicable
CVE-2025-47913NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.43.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39829NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39830NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39835NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-46597NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
golang.org/x/net
v0.34.0
fixed in 0.53.0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.23.6
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.23.6
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.23.6
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.23.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.23.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.23.6
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.23.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.23.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.23.6
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2024-12797NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.3-r0
2.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69419NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-12797NONE0
libssl3
3.3.2-r4
fixed in 3.3.3-r0
2.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69419NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42508NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46595NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-26519NONE0
musl
1.2.5-r8
fixed in 1.2.5-r9
0.3%
Theoretical Threat
Not Applicable
CVE-2025-26519NONE0
musl-utils
1.2.5-r8
fixed in 1.2.5-r9
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39883NONE0
go.opentelemetry.io/otel/sdk
v1.34.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47907NONE0
stdlib
v1.23.6
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-4673NONE0
stdlib
v1.23.6
fixed in 1.23.10, 1.24.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39827NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39834NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-22872NONE0
golang.org/x/net
v0.34.0
fixed in 0.38.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25680NONE0
golang.org/x/net
v0.34.0
fixed in 0.55.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-47906NONE0
stdlib
v1.23.6
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.23.6
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.23.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-32287NONE0
github.com/antchfx/xpath
v1.3.3
fixed in 1.3.6
0.5%
Theoretical Threat
Not Applicable
CVE-2026-42502NONE0
golang.org/x/net
v0.34.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.23.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9231NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.5-r0
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-31790NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.7-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-15468NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-66199NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69420NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-22796NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-9231NONE0
libssl3
3.3.2-r4
fixed in 3.3.5-r0
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-31790NONE0
libssl3
3.3.2-r4
fixed in 3.3.7-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-15468NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-66199NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69420NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-22796NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-9230NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.5-r0
1.7%
Low-Moderate Risk
Not Applicable
CVE-2025-9230NONE0
libssl3
3.3.2-r4
fixed in 3.3.5-r0
1.7%
Low-Moderate Risk
Not Applicable
CVE-2026-22795NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-22795NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-6042NONE0
musl
1.2.5-r8
fixed in 1.2.5-r10
0.2%
Theoretical Threat
Not Applicable
CVE-2026-6042NONE0
musl-utils
1.2.5-r8
fixed in 1.2.5-r10
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib
1.3.1-r2
fixed in 1.3.2-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39833NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.23.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42506NONE0
golang.org/x/net
v0.34.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22871NONE0
stdlib
v1.23.6
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.23.6
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.23.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-11065NONE0
github.com/go-viper/mapstructure/v2
v2.2.1
fixed in 2.4.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47914NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58181NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.45.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46598NONE0
golang.org/x/crypto
v0.32.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47911NONE0
golang.org/x/net
v0.34.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58190NONE0
golang.org/x/net
v0.34.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-22873NONE0
stdlib
v1.23.6
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.23.6
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.23.6
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.23.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.23.6
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.23.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-13176NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.2-r5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68160NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2024-13176NONE0
libssl3
3.3.2-r4
fixed in 3.3.2-r5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68160NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
golang.org/x/net
v0.34.0
fixed in 0.36.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
stdlib
v1.23.6
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69418NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69418NONE0
libssl3
3.3.2-r4
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-46394NONE0
ssl_client
1.37.0-r9
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
CVE-2025-9232NONE0
libcrypto3
3.3.2-r4
fixed in 3.3.5-r0
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-9232NONE0
libssl3
3.3.2-r4
fixed in 3.3.5-r0
2.3%
Low-Moderate Risk
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.23.6
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1.37.0-r9
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox-binsh
1.37.0-r9
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
ssl_client
1.37.0-r9
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
GHSA-fv92-fjc5-jj9hNONE0
github.com/go-viper/mapstructure/v2
v2.2.1
fixed in 2.3.0
—
Not Applicable
CVE-2026-24051NONE0
go.opentelemetry.io/otel/sdk
v1.34.0
fixed in 1.40.0
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.32.0
No fix yet
—
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.34.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.30.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.21.0
fixed in 0.39.0
0.4%
Theoretical Threat
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.70.0
fixed in 1.82.1
—
Not Applicable
CVE-2025-0913NONE0
stdlib
v1.23.6
fixed in 1.23.10, 1.24.4
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.