Vulnerability Reportkong:3.0.0

kong:3.0.0
digestsha256:803bda2f6c38fc042d3ac93625eec8acf1e4dec8db05566876187bb500555394

Executive Summary

Last scanned:

Threat Score
25/100NEEDS ATTENTION
Reputation
TRUSTED

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

97 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2022-23521HIGH7.64
git
2.36.2-r0
fixed in 2.36.4-r0
56.3%
Actively Exploited
Post-Exploit
CVE-2022-41903MEDIUM6.76
git
2.36.2-r0
fixed in 2.36.4-r0
44.3%
High Exploitation Risk
Post-Exploit
CVE-2023-25652MEDIUM5.85
git
2.36.2-r0
fixed in 2.36.6-r0
51.9%
Actively Exploited
Post-Exploit
CVE-2023-0286MEDIUM5.77
openssl
1.1.1q-r0
fixed in 1.1.1t-r0
59.5%
Actively Exploited
Post-Exploit
CVE-2022-39260MEDIUM5.28
git
2.36.2-r0
fixed in 2.36.3-r0
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-4450MEDIUM5.17
openssl
1.1.1q-r0
fixed in 1.1.1t-r0
20.4%
High Exploitation Risk
Post-Exploit
CVE-2023-2650MEDIUM5.07
openssl
1.1.1q-r0
fixed in 1.1.1u-r0
75.1%
Actively Exploited
Post-Exploit
CVE-2023-29007MEDIUM4.68
git
2.36.2-r0
fixed in 2.36.6-r0
6.1%
Low-Moderate Risk
Post-Exploit
CVE-2023-23946MEDIUM4.5
git
2.36.2-r0
fixed in 2.36.5-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2023-0215MEDIUM4.5
openssl
1.1.1q-r0
fixed in 1.1.1t-r0
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-0464MEDIUM4.5
openssl
1.1.1q-r0
fixed in 1.1.1t-r1
3.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-4304MEDIUM4.07
openssl
1.1.1q-r0
fixed in 1.1.1t-r0
16.2%
High Exploitation Risk
Post-Exploit
CVE-2022-39253LOW3.3
git
2.36.2-r0
fixed in 2.36.3-r0
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-0465LOW3.18
openssl
1.1.1q-r0
fixed in 1.1.1t-r2
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-3446LOW3.18
openssl
1.1.1q-r0
fixed in 1.1.1u-r2
6.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-3817LOW3.18
openssl
1.1.1q-r0
fixed in 1.1.1v-r0
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-5678LOW3.18
openssl
1.1.1q-r0
fixed in 1.1.1w-r1
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1.35.0-r17
fixed in 1.35.0-r18
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-22490LOW2.8
git
2.36.2-r0
fixed in 2.36.5-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-25815LOW1.12
git
2.36.2-r0
fixed in 2.36.6-r0
1.0%
Theoretical Threat
Post-Exploit
CVE-2022-23521NONE0
git-perl
2.36.2-r0
fixed in 2.36.4-r0
56.3%
Actively Exploited
Not Applicable
CVE-2022-41903NONE0
git-perl
2.36.2-r0
fixed in 2.36.4-r0
44.3%
High Exploitation Risk
Not Applicable
CVE-2022-32221NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r4
4.3%
Low-Moderate Risk
Not Applicable
CVE-2023-38545NONE0
libcurl
7.83.1-r3
fixed in 8.4.0-r0
78.5%
Actively Exploited
Not Applicable
CVE-2022-23521NONE0
perl-git
2.36.2-r0
fixed in 2.36.4-r0
56.3%
Actively Exploited
Not Applicable
CVE-2022-41903NONE0
perl-git
2.36.2-r0
fixed in 2.36.4-r0
44.3%
High Exploitation Risk
Not Applicable
CVE-2023-23914NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r6
0.9%
Theoretical Threat
Not Applicable
CVE-2022-39260NONE0
git-perl
2.36.2-r0
fixed in 2.36.3-r0
3.1%
Low-Moderate Risk
Not Applicable
CVE-2023-27533NONE0
libcurl
7.83.1-r3
fixed in 8.0.1-r0
2.0%
Low-Moderate Risk
Not Applicable
CVE-2023-27534NONE0
libcurl
7.83.1-r3
fixed in 8.0.1-r0
2.2%
Low-Moderate Risk
Not Applicable
CVE-2022-39260NONE0
perl-git
2.36.2-r0
fixed in 2.36.3-r0
3.1%
Low-Moderate Risk
Not Applicable
CVE-2022-42915NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r4
2.9%
Low-Moderate Risk
Not Applicable
CVE-2023-29007NONE0
git-perl
2.36.2-r0
fixed in 2.36.6-r0
6.1%
Low-Moderate Risk
Not Applicable
CVE-2023-2603NONE0
libcap
2.64-r0
fixed in 2.64-r1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-29491NONE0
ncurses-libs
6.3_p20220521-r0
fixed in 6.3_p20220521-r1
0.9%
Theoretical Threat
Not Applicable
CVE-2023-29491NONE0
ncurses-terminfo-base
6.3_p20220521-r0
fixed in 6.3_p20220521-r1
0.9%
Theoretical Threat
Not Applicable
CVE-2023-47038NONE0
perl
5.34.1-r0
fixed in 5.34.2-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2023-29007NONE0
perl-git
2.36.2-r0
fixed in 2.36.6-r0
6.1%
Low-Moderate Risk
Not Applicable
CVE-2022-43680NONE0
expat
2.4.9-r0
fixed in 2.5.0-r0
2.3%
Low-Moderate Risk
Not Applicable
CVE-2023-52425NONE0
expat
2.4.9-r0
fixed in 2.6.0-r0
1.8%
Low-Moderate Risk
Not Applicable
CVE-2024-28757NONE0
expat
2.4.9-r0
fixed in 2.6.2-r0
2.0%
Low-Moderate Risk
Not Applicable
CVE-2023-23946NONE0
git-perl
2.36.2-r0
fixed in 2.36.5-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-25652NONE0
git-perl
2.36.2-r0
fixed in 2.36.6-r0
51.9%
Actively Exploited
Not Applicable
CVE-2022-4450NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1t-r0
20.4%
High Exploitation Risk
Not Applicable
CVE-2023-0215NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1t-r0
4.5%
Low-Moderate Risk
Not Applicable
CVE-2023-0464NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1t-r1
3.7%
Low-Moderate Risk
Not Applicable
CVE-2022-42916NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r4
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-43551NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r5
16.5%
High Exploitation Risk
Not Applicable
CVE-2023-28319NONE0
libcurl
7.83.1-r3
fixed in 8.1.0-r0
2.5%
Low-Moderate Risk
Not Applicable
CVE-2023-38039NONE0
libcurl
7.83.1-r3
fixed in 8.3.0-r0
62.2%
Actively Exploited
Not Applicable
CVE-2022-4450NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1t-r0
20.4%
High Exploitation Risk
Not Applicable
CVE-2023-0215NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1t-r0
4.5%
Low-Moderate Risk
Not Applicable
CVE-2023-0464NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1t-r1
3.7%
Low-Moderate Risk
Not Applicable
CVE-2023-35945NONE0
nghttp2-libs
1.47.0-r0
fixed in 1.47.0-r1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-44487NONE0
nghttp2-libs
1.47.0-r0
fixed in 1.47.0-r2
100.0%
Actively Exploited
Not Applicable
CVE-2022-41409NONE0
pcre2
10.40-r0
fixed in 10.42-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-23946NONE0
perl-git
2.36.2-r0
fixed in 2.36.5-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-25652NONE0
perl-git
2.36.2-r0
fixed in 2.36.6-r0
51.9%
Actively Exploited
Not Applicable
CVE-2023-0286NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1t-r0
59.5%
Actively Exploited
Not Applicable
CVE-2023-0286NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1t-r0
59.5%
Actively Exploited
Not Applicable
CVE-2025-26519NONE0
musl
1.2.3-r0
fixed in 1.2.3-r4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-26519NONE0
musl-utils
1.2.3-r0
fixed in 1.2.3-r4
0.3%
Theoretical Threat
Not Applicable
CVE-2023-2650NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1u-r0
75.1%
Actively Exploited
Not Applicable
CVE-2023-23915NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r6
0.9%
Theoretical Threat
Not Applicable
CVE-2023-23916NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r6
1.7%
Low-Moderate Risk
Not Applicable
CVE-2023-46218NONE0
libcurl
7.83.1-r3
fixed in 8.5.0-r0
1.7%
Low-Moderate Risk
Not Applicable
CVE-2023-2650NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1u-r0
75.1%
Actively Exploited
Not Applicable
CVE-2022-4304NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1t-r0
16.2%
High Exploitation Risk
Not Applicable
CVE-2022-43552NONE0
libcurl
7.83.1-r3
fixed in 7.83.1-r5
2.5%
Low-Moderate Risk
Not Applicable
CVE-2023-27535NONE0
libcurl
7.83.1-r3
fixed in 8.0.1-r0
1.6%
Low-Moderate Risk
Not Applicable
CVE-2023-27536NONE0
libcurl
7.83.1-r3
fixed in 8.0.1-r0
1.6%
Low-Moderate Risk
Not Applicable
CVE-2023-27537NONE0
libcurl
7.83.1-r3
fixed in 8.0.1-r0
1.9%
Low-Moderate Risk
Not Applicable
CVE-2023-28320NONE0
libcurl
7.83.1-r3
fixed in 8.1.0-r0
2.7%
Low-Moderate Risk
Not Applicable
CVE-2023-28321NONE0
libcurl
7.83.1-r3
fixed in 8.1.0-r0
1.8%
Low-Moderate Risk
Not Applicable
CVE-2022-4304NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1t-r0
16.2%
High Exploitation Risk
Not Applicable
CVE-2023-52426NONE0
expat
2.4.9-r0
fixed in 2.6.0-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2022-39253NONE0
git-perl
2.36.2-r0
fixed in 2.36.3-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-22490NONE0
git-perl
2.36.2-r0
fixed in 2.36.5-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2023-27538NONE0
libcurl
7.83.1-r3
fixed in 8.0.1-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-39253NONE0
perl-git
2.36.2-r0
fixed in 2.36.3-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-22490NONE0
perl-git
2.36.2-r0
fixed in 2.36.5-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2023-24056NONE0
pkgconf
1.8.0-r1
fixed in 1.8.1-r0
0.5%
Theoretical Threat
Not Applicable
CVE-2023-42366NONE0
ssl_client
1.35.0-r17
fixed in 1.35.0-r18
0.4%
Theoretical Threat
Not Applicable
CVE-2023-0465NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1t-r2
1.6%
Low-Moderate Risk
Not Applicable
CVE-2023-3446NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1u-r2
6.5%
Low-Moderate Risk
Not Applicable
CVE-2023-3817NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1v-r0
2.6%
Low-Moderate Risk
Not Applicable
CVE-2023-5678NONE0
libcrypto1.1
1.1.1q-r0
fixed in 1.1.1w-r1
4.5%
Low-Moderate Risk
Not Applicable
CVE-2023-46219NONE0
libcurl
7.83.1-r3
fixed in 8.5.0-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-0465NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1t-r2
1.6%
Low-Moderate Risk
Not Applicable
CVE-2023-3446NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1u-r2
6.5%
Low-Moderate Risk
Not Applicable
CVE-2023-3817NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1v-r0
2.6%
Low-Moderate Risk
Not Applicable
CVE-2023-5678NONE0
libssl1.1
1.1.1q-r0
fixed in 1.1.1w-r1
4.5%
Low-Moderate Risk
Not Applicable
CVE-2023-28322NONE0
libcurl
7.83.1-r3
fixed in 8.1.0-r0
2.2%
Low-Moderate Risk
Not Applicable
CVE-2023-38546NONE0
libcurl
7.83.1-r3
fixed in 8.4.0-r0
6.2%
Low-Moderate Risk
Not Applicable
CVE-2023-2602NONE0
libcap
2.64-r0
fixed in 2.64-r1
0.4%
Theoretical Threat
Not Applicable
CVE-2023-25815NONE0
git-perl
2.36.2-r0
fixed in 2.36.6-r0
1.0%
Theoretical Threat
Not Applicable
CVE-2023-25815NONE0
perl-git
2.36.2-r0
fixed in 2.36.6-r0
1.0%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.