Vulnerability Reportkibana:8.19.19

kibana:8.19.19
digestsha256:5e0ac2d1c4badda5ad17fdaf3b1af55f9b2b8e8998c171915880c237a0c61d2c

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
TRUSTED

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

91 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376NONE0
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42496NONE0
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-50289NONE0
systeminformation
5.31.6
fixed in 5.31.7
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-40355NONE0
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40356NONE0
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40355NONE0
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40356NONE0
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40355NONE0
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40356NONE0
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40355NONE0
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-40356NONE0
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Not Applicable
CVE-2026-59892NONE0
@opentelemetry/propagator-jaeger
2.8.0
fixed in 2.9.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-13149NONE0
brace-expansion
1.1.15
fixed in 5.0.7, 1.1.16, 2.1.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-13149NONE0
brace-expansion
2.1.1
fixed in 5.0.7, 1.1.16, 2.1.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-41907NONE0
uuid
10.0.0
fixed in 11.1.1, 12.0.1, 13.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-41907NONE0
uuid
11.1.0
fixed in 11.1.1, 12.0.1, 13.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-41907NONE0
uuid
13.0.0
fixed in 11.1.1, 12.0.1, 13.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-41907NONE0
uuid
8.3.2
fixed in 11.1.1, 12.0.1, 13.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-41907NONE0
uuid
9.0.1
fixed in 11.1.1, 12.0.1, 13.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-8769NONE0
@ai-sdk/provider-utils
3.0.25
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39244NONE0
adm-zip
0.5.9
fixed in 0.6.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2024-2236NONE0
libgcrypt20
1.10.3-2ubuntu0.1
No fix yet
1.1%
Low-Moderate Risk
Not Applicable
CVE-2025-66382NONE0
libexpat1
2.6.1-2ubuntu0.4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-41650NONE0
fast-xml-parser
5.5.7
fixed in 5.7.0
0.2%
Theoretical Threat
Not Applicable
CVE-2024-53382NONE0
prismjs
1.27.0
fixed in 1.30.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54285NONE0
@opentelemetry/core
1.26.0
fixed in 2.8.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54285NONE0
@opentelemetry/core
1.30.1
fixed in 2.8.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-2739NONE0
bn.js
4.11.9
fixed in 4.12.3, 5.2.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-11850NONE0
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11850NONE0
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11850NONE0
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11850NONE0
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libblkid1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libmount1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libsmartcols1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libuuid1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libudev1
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Not Applicable
GHSA-gcfj-64vw-6mp9NONE0
axios
1.16.1
fixed in 0.33.0, 1.18.0
—
Not Applicable
GHSA-42h9-826w-cgv3NONE0
axios
1.16.1
fixed in 0.33.0, 1.18.0
—
Not Applicable
GHSA-7q8q-rj6j-mhjqNONE0
axios
1.16.1
fixed in 0.33.0, 1.18.0
—
Not Applicable
GHSA-f4gw-2p7v-4548NONE0
axios
1.16.1
fixed in 1.18.0, 0.33.0
—
Not Applicable
GHSA-hcpx-6fm6-wx23NONE0
axios
1.16.1
fixed in 0.33.0, 1.18.0
—
Not Applicable
GHSA-jqh4-m9w3-8hp9NONE0
axios
1.16.1
fixed in 1.18.0
—
Not Applicable
GHSA-mmx7-hfxf-jppxNONE0
axios
1.16.1
fixed in 1.18.0, 0.33.0
—
Not Applicable
GHSA-mwf2-3pr3-8698NONE0
axios
1.16.1
fixed in 1.18.0
—
Not Applicable
GHSA-pmv8-rq9r-6j72NONE0
axios
1.16.1
fixed in 0.33.0, 1.18.0
—
Not Applicable
GHSA-xj6q-8x83-jv6gNONE0
axios
1.16.1
fixed in 1.18.0
—
Not Applicable
CVE-2026-14257NONE0
brace-expansion
1.1.15
fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17
0.3%
Theoretical Threat
Not Applicable
CVE-2026-14257NONE0
brace-expansion
2.1.1
fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17
0.3%
Theoretical Threat
Not Applicable
CVE-2026-14257NONE0
brace-expansion
5.0.7
fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17
0.3%
Theoretical Threat
Not Applicable
GHSA-c2j3-45gr-mqc4NONE0
dompurify
3.4.11
fixed in 3.4.12
—
Not Applicable
CVE-2026-16221NONE0
fast-uri
3.1.3
fixed in 2.4.3, 3.1.4, 4.1.1
0.2%
Theoretical Threat
Not Applicable
GHSA-p6gq-j5cr-w38fNONE0
nodemailer
8.0.7
fixed in 9.0.1
—
Not Applicable
GHSA-268h-hp4c-crq3NONE0
nodemailer
8.0.7
fixed in 8.0.9
—
Not Applicable
GHSA-r7g4-qg5f-qqm2NONE0
nodemailer
8.0.7
fixed in 8.0.8
—
Not Applicable
GHSA-wqvq-jvpq-h66fNONE0
nodemailer
8.0.7
fixed in 8.0.9
—
Not Applicable
GHSA-r292-9mhp-454mNONE0
tar
7.5.19
fixed in 7.5.21
—
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.