Vulnerability Reportkylemanna/openvpn:latest

kylemanna/openvpn:latest
digestsha256:643531abb010a088f1e23a1c99d44f0bd417a3dbb483f809caf4396b5c9829a0

Executive Summary

Last scanned:

Threat Score
89/100DANGEROUS
Reputation
RELIABLE

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker who reaches the VPN port could exploit CVE-2023-46850 to corrupt memory or run code on the server, gaining a foothold on the host network it serves and potentially disrupting or tapping VPN traffic. The title places this flaw in OpenVPN 2.6.0 to 2.6.6, while the installed package is 2.4.9-r0, so the match must be confirmed, but the scan still flags it as a critical finding and the base OS no longer receives security fixes. Do not deploy this image in production.

Hardening plan for this image · 4 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

400 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2023-46850CRITICAL9.8
openvpn
2.4.9-r0
fixed in 2.6.7-r0
2.0%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2023-46850CRITICAL9.8
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.7-r0
2.0%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2022-0547HIGH7.84
openvpn
2.4.9-r0
fixed in 2.5.6-r0
3.5%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2022-0547HIGH7.84
openvpn-auth-pam
2.4.9-r0
fixed in 2.5.6-r0
3.5%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2023-0286HIGH7.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
69.3%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2023-0286HIGH7.7
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
69.3%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2023-0286HIGH7.7
openssl
1.1.1g-r0
fixed in 3.0.8-r0
69.3%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2020-15078HIGH7.5
openvpn
2.4.9-r0
fixed in 2.5.2-r0
4.9%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2023-46849HIGH7.5
openvpn
2.4.9-r0
fixed in 2.6.7-r0
1.1%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2025-13086HIGH7.5
openvpn
2.4.9-r0
fixed in 2.6.16-r0
0.7%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-11771HIGH7.5
openvpn
2.4.9-r0
fixed in 2.7.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-13698HIGH7.5
openvpn
2.4.9-r0
fixed in 2.7.5-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-84732HIGH7.5
openvpn
2.4.9-r0
fixed in 2.7.7-r0
0.3%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2020-15078HIGH7.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.5.2-r0
4.9%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2023-46849HIGH7.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.7-r0
1.1%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2025-13086HIGH7.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.16-r0
0.7%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-11771HIGH7.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-13698HIGH7.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.5-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-84732HIGH7.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.7-r0
0.3%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-40215HIGH7.4
openvpn
2.4.9-r0
fixed in 2.6.20-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-40215HIGH7.4
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.20-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2021-3450MEDIUM6.81
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1k-r0
18.3%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2021-3450MEDIUM6.81
libssl1.1
1.1.1g-r0
fixed in 1.1.1k-r0
18.3%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2021-3450MEDIUM6.81
openssl
1.1.1g-r0
fixed in 1.1.1k-r0
18.3%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2022-4304MEDIUM6.79
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
23.5%
High Exploitation Risk
Directly Exposed
CVE-2022-4304MEDIUM6.79
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
23.5%
High Exploitation Risk
Directly Exposed
CVE-2023-2650MEDIUM6.76
libcrypto1.1
1.1.1g-r0
fixed in 3.1.1-r0
73.7%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2023-2650MEDIUM6.76
libssl1.1
1.1.1g-r0
fixed in 3.1.1-r0
73.7%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2023-2650MEDIUM6.76
openssl
1.1.1g-r0
fixed in 3.1.1-r0
73.7%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2023-6129MEDIUM6.5
libcrypto1.1
1.1.1g-r0
fixed in 3.1.4-r3
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-2673MEDIUM6.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-6129MEDIUM6.5
libssl1.1
1.1.1g-r0
fixed in 3.1.4-r3
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-2673MEDIUM6.5
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-35058MEDIUM6.5
openvpn
2.4.9-r0
fixed in 2.6.20-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-35058MEDIUM6.5
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.20-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-12932MEDIUM6.48
openvpn
2.4.9-r0
fixed in 2.7.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-12996MEDIUM6.48
openvpn
2.4.9-r0
fixed in 2.7.5-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-13117MEDIUM6.48
openvpn
2.4.9-r0
fixed in 2.7.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-12932MEDIUM6.48
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-12996MEDIUM6.48
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.5-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-13117MEDIUM6.48
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-34181MEDIUM6.3
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42768MEDIUM6.3
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-34181MEDIUM6.3
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42768MEDIUM6.3
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2021-3449MEDIUM6.14
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1k-r0
63.5%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2021-3449MEDIUM6.14
libssl1.1
1.1.1g-r0
fixed in 1.1.1k-r0
63.5%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2021-3449MEDIUM6.14
openssl
1.1.1g-r0
fixed in 1.1.1k-r0
63.5%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2025-11187MEDIUM6.1
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-11187MEDIUM6.1
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-3094MEDIUM6
xz-libs
5.2.5-r0
fixed in 5.6.1-r2
90.9%
Actively Exploited
Directly Exposed
CVE-2021-3711MEDIUM6
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Directly Exposed
CVE-2025-15467MEDIUM6
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
74.8%
Actively Exploited
Directly Exposed
CVE-2021-3711MEDIUM6
libssl1.1
1.1.1g-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Directly Exposed
CVE-2025-15467MEDIUM6
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
74.8%
Actively Exploited
Directly Exposed
CVE-2022-37434MEDIUM6
zlib
1.2.11-r3
fixed in 1.2.12-r2
19.2%
High Exploitation Risk
Directly Exposed
CVE-2022-3996MEDIUM6
libcrypto1.1
1.1.1g-r0
fixed in 3.0.7-r2
1.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2022-3996MEDIUM6
libssl1.1
1.1.1g-r0
fixed in 3.0.7-r2
1.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2022-3996MEDIUM6
openssl
1.1.1g-r0
fixed in 3.0.7-r2
1.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-26519MEDIUM5.95
musl
1.1.24-r9
fixed in 1.2.5-r10
0.3%
Theoretical Threat
Directly Exposed
CVE-2020-1971MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1i-r0
7.0%
Low-Moderate Risk
Directly Exposed
CVE-2021-23841MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1j-r0
7.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-1434MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.0.3-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-9231MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.4-r0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-42764MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-6237MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.1.4-r4
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-5535MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.3.1-r1
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-15468MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-66199MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42769MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-63073MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-9076MEDIUM5.9
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2020-1971MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 1.1.1i-r0
7.0%
Low-Moderate Risk
Directly Exposed
CVE-2021-23841MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 1.1.1j-r0
7.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-1434MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.0.3-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-9231MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.4-r0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-42764MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-6237MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.1.4-r4
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-5535MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.3.1-r1
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-15468MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-66199MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42769MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-63073MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-9076MEDIUM5.9
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-31789MEDIUM5.88
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-31789MEDIUM5.88
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2020-27780MEDIUM5.88
linux-pam
1.3.1-r4
fixed in 1.5.1-r0
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2021-23840MEDIUM5.85
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1j-r0
50.7%
Actively Exploited
Directly Exposed
CVE-2021-4044MEDIUM5.85
libcrypto1.1
1.1.1g-r0
fixed in 3.0.1-r0
50.1%
Actively Exploited
Directly Exposed
CVE-2022-0778MEDIUM5.85
libcrypto1.1
1.1.1g-r0
fixed in 3.0.2-r0
73.2%
Actively Exploited
Directly Exposed
CVE-2022-3602MEDIUM5.85
libcrypto1.1
1.1.1g-r0
fixed in 3.0.7-r0
90.8%
Actively Exploited
Directly Exposed
CVE-2022-3786MEDIUM5.85
libcrypto1.1
1.1.1g-r0
fixed in 3.0.7-r0
92.5%
Actively Exploited
Directly Exposed
CVE-2024-6119MEDIUM5.85
libcrypto1.1
1.1.1g-r0
fixed in 3.3.2-r0
66.6%
Actively Exploited
Directly Exposed
CVE-2021-23840MEDIUM5.85
libssl1.1
1.1.1g-r0
fixed in 1.1.1j-r0
50.7%
Actively Exploited
Directly Exposed
CVE-2021-4044MEDIUM5.85
libssl1.1
1.1.1g-r0
fixed in 3.0.1-r0
50.1%
Actively Exploited
Directly Exposed
CVE-2022-0778MEDIUM5.85
libssl1.1
1.1.1g-r0
fixed in 3.0.2-r0
73.2%
Actively Exploited
Directly Exposed
CVE-2022-3602MEDIUM5.85
libssl1.1
1.1.1g-r0
fixed in 3.0.7-r0
90.8%
Actively Exploited
Directly Exposed
CVE-2022-3786MEDIUM5.85
libssl1.1
1.1.1g-r0
fixed in 3.0.7-r0
92.5%
Actively Exploited
Directly Exposed
CVE-2024-6119MEDIUM5.85
libssl1.1
1.1.1g-r0
fixed in 3.3.2-r0
66.6%
Actively Exploited
Directly Exposed
CVE-2022-3602MEDIUM5.85
openssl
1.1.1g-r0
fixed in 3.0.7-r0
90.8%
Actively Exploited
Directly Exposed
CVE-2022-3786MEDIUM5.85
openssl
1.1.1g-r0
fixed in 3.0.7-r0
92.5%
Actively Exploited
Directly Exposed
CVE-2018-25032MEDIUM5.85
zlib
1.2.11-r3
fixed in 1.2.11-r4
51.7%
Actively Exploited
Directly Exposed
CVE-2021-3712MEDIUM5.77
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Directly Exposed
CVE-2021-3712MEDIUM5.77
libssl1.1
1.1.1g-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Directly Exposed
CVE-2025-9230MEDIUM5.6
libcrypto1.1
1.1.1g-r0
fixed in 3.5.4-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2024-4741MEDIUM5.6
libcrypto1.1
1.1.1g-r0
fixed in 3.3.0-r3
2.9%
Low-Moderate Risk
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl1.1
1.1.1g-r0
fixed in 3.5.4-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2024-4741MEDIUM5.6
libssl1.1
1.1.1g-r0
fixed in 3.3.0-r3
2.9%
Low-Moderate Risk
Directly Exposed
CVE-2025-4575MEDIUM5.52
libcrypto1.1
1.1.1g-r0
fixed in 3.5.1-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-4575MEDIUM5.52
libssl1.1
1.1.1g-r0
fixed in 3.5.1-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-0727MEDIUM5.5
libcrypto1.1
1.1.1g-r0
fixed in 3.1.4-r5
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-15469MEDIUM5.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM5.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM5.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-0727MEDIUM5.5
libssl1.1
1.1.1g-r0
fixed in 3.1.4-r5
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-15469MEDIUM5.5
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM5.5
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM5.5
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-6042MEDIUM5.5
musl
1.1.24-r9
fixed in 1.2.6-r1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-45445MEDIUM5.46
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-45445MEDIUM5.46
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2022-1343MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.0.3-r0
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.0.5-r0
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-0465MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.1.0-r2
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-3446MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.1.1-r3
6.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-3817MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.1.2-r0
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-5678MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.1.4-r1
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-4603MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.3.0-r2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42766MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42767MEDIUM5.3
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-1343MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.0.3-r0
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.0.5-r0
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-0465MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.1.0-r2
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-3446MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.1.1-r3
6.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-3817MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.1.2-r0
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-5678MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.1.4-r1
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-4603MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.3.0-r2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42766MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42767MEDIUM5.3
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-13122MEDIUM5.3
openvpn
2.4.9-r0
fixed in 2.7.5-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-13122MEDIUM5.3
openvpn-auth-pam
2.4.9-r0
fixed in 2.7.5-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2022-1271MEDIUM5.28
xz-libs
5.2.5-r0
fixed in 5.2.5-r1
5.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-1255MEDIUM5.02
libcrypto1.1
1.1.1g-r0
fixed in 3.1.0-r4
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-1255MEDIUM5.02
libssl1.1
1.1.1g-r0
fixed in 3.1.0-r4
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-34180MEDIUM5
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-4203MEDIUM4.9
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-4203MEDIUM4.9
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-25646MEDIUM4.86
libpng
1.6.37-r1
fixed in 1.6.55-r0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-2511MEDIUM4.81
libcrypto1.1
1.1.1g-r0
fixed in 3.2.1-r2
52.4%
Actively Exploited
Directly Exposed
CVE-2024-2511MEDIUM4.81
libssl1.1
1.1.1g-r0
fixed in 3.2.1-r2
52.4%
Actively Exploited
Directly Exposed
CVE-2025-68160MEDIUM4.7
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4.7
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22801MEDIUM4.68
libpng
1.6.37-r1
fixed in 1.6.54-r0
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40200MEDIUM4.68
musl
1.1.24-r9
fixed in 1.2.6-r2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22184MEDIUM4.68
zlib
1.2.11-r3
fixed in 1.3.2-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
linux-pam
1.3.1-r4
fixed in 1.6.0-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2020-28928MEDIUM4.67
musl
1.1.24-r9
fixed in 1.2.2_pre2-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2021-3711MEDIUM4.58
openssl
1.1.1g-r0
fixed in 1.1.1l-r0
87.8%
Actively Exploited
Post-Exploit
CVE-2025-15467MEDIUM4.58
openssl
1.1.1g-r0
fixed in 3.5.5-r0
74.8%
Actively Exploited
Post-Exploit
CVE-2026-33636MEDIUM4.56
libpng
1.6.37-r1
fixed in 1.6.56-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2021-30139MEDIUM4.5
apk-tools
2.10.5-r1
fixed in 2.12.5-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-0464MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.1.0-r1
4.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-69421MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-14456MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-18798MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-34183MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-63076MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-14457MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-54874MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63075MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33416MEDIUM4.5
libpng
1.6.37-r1
fixed in 1.6.56-r0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-0464MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.1.0-r1
4.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-69421MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-14456MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-18798MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-34183MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-63076MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-14457MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-54874MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63075MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-0464MEDIUM4.5
openssl
1.1.1g-r0
fixed in 3.1.0-r1
4.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388MEDIUM4.5
openssl
1.1.1g-r0
fixed in 3.5.6-r0
0.9%
Theoretical Threat
Directly Exposed
CVE-2023-2975MEDIUM4.5
libcrypto1.1
1.1.1g-r0
fixed in 3.1.1-r2
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-2975MEDIUM4.5
libssl1.1
1.1.1g-r0
fixed in 3.1.1-r2
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-12797MEDIUM4.44
libcrypto1.1
1.1.1g-r0
fixed in 3.3.3-r0
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2025-69419MEDIUM4.44
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-12797MEDIUM4.44
libssl1.1
1.1.1g-r0
fixed in 3.3.3-r0
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2025-69419MEDIUM4.44
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-42378MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2021-42379MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42380MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42381MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42382MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42383MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2021-42384MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2021-42385MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42386MEDIUM4.32
busybox
1.31.1-r19
fixed in 1.34.0-r0
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2021-42378MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2021-42379MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42380MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-42381MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42382MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42383MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2021-42384MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2021-42385MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2021-42386MEDIUM4.32
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-64720MEDIUM4.26
libpng
1.6.37-r1
fixed in 1.6.51-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-65018MEDIUM4.26
libpng
1.6.37-r1
fixed in 1.6.51-r0
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-66293MEDIUM4.26
libpng
1.6.37-r1
fixed in 1.6.53-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22695MEDIUM4.26
libpng
1.6.37-r1
fixed in 1.6.54-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-29458MEDIUM4.26
ncurses-libs
6.2_p20200523-r0
fixed in 6.3_p20220416-r0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-29458MEDIUM4.26
ncurses-terminfo-base
6.2_p20200523-r0
fixed in 6.3_p20220416-r0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-28882MEDIUM4.25
openvpn
2.4.9-r0
fixed in 2.6.11-r0
0.7%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2024-5594MEDIUM4.25
openvpn
2.4.9-r0
fixed in 2.6.11-r0
0.8%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2025-2704MEDIUM4.25
openvpn
2.4.9-r0
fixed in 2.6.14-r0
0.8%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2024-28882MEDIUM4.25
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.11-r0
0.7%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2024-5594MEDIUM4.25
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.11-r0
0.8%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2025-2704MEDIUM4.25
openvpn-auth-pam
2.4.9-r0
fixed in 2.6.14-r0
0.8%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2022-4304MEDIUM4.07
openssl
1.1.1g-r0
fixed in 3.0.8-r0
23.5%
High Exploitation Risk
Post-Exploit
CVE-2024-13176MEDIUM4
libcrypto1.1
1.1.1g-r0
fixed in 3.3.2-r5
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
libssl1.1
1.1.1g-r0
fixed in 3.3.2-r5
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69418MEDIUM4
libcrypto1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69418MEDIUM4
libssl1.1
1.1.1g-r0
fixed in 3.5.5-r0
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-107891MEDIUM4
musl
1.1.24-r9
fixed in 1.2.6-r6
—
Directly Exposed
CVE-2023-29491LOW3.98
ncurses-libs
6.2_p20200523-r0
fixed in 6.4_p20230424-r0
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-29491LOW3.98
ncurses-terminfo-base
6.2_p20200523-r0
fixed in 6.4_p20230424-r0
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-6129LOW3.9
openssl
1.1.1g-r0
fixed in 3.1.4-r3
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-2673LOW3.9
openssl
1.1.1g-r0
fixed in 3.5.6-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-31115LOW3.83
xz-libs
5.2.5-r0
fixed in 5.8.1-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34181LOW3.78
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42768LOW3.78
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2021-23839LOW3.7
libcrypto1.1
1.1.1g-r0
fixed in 1.1.1j-r0
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-9143LOW3.7
libcrypto1.1
1.1.1g-r0
fixed in 3.3.2-r3
5.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-45446LOW3.7
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.7
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.3%
Theoretical Threat
Directly Exposed
CVE-2021-23839LOW3.7
libssl1.1
1.1.1g-r0
fixed in 1.1.1j-r0
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-9143LOW3.7
libssl1.1
1.1.1g-r0
fixed in 3.3.2-r3
5.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-45446LOW3.7
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.7
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-64506LOW3.66
libpng
1.6.37-r1
fixed in 1.6.51-r0
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-11187LOW3.66
openssl
1.1.1g-r0
fixed in 3.5.5-r0
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-26519LOW3.57
musl-utils
1.1.24-r9
fixed in 1.2.5-r10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-46675LOW3.54
libpng
1.6.37-r1
fixed in 1.6.59-r0
—
Directly Exposed
CVE-2020-1971LOW3.54
openssl
1.1.1g-r0
fixed in 1.1.1i-r0
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2021-23841LOW3.54
openssl
1.1.1g-r0
fixed in 1.1.1j-r0
7.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-1434LOW3.54
openssl
1.1.1g-r0
fixed in 3.0.3-r0
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-9231LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.4-r0
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-31790LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.6-r0
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-42764LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.7-r0
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-6237LOW3.54
openssl
1.1.1g-r0
fixed in 3.1.4-r4
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2024-5535LOW3.54
openssl
1.1.1g-r0
fixed in 3.3.1-r1
5.6%
Low-Moderate Risk
Post-Exploit
CVE-2025-15468LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-66199LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69420LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42769LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-63073LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-9076LOW3.54
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2022-48174LOW3.53
busybox
1.31.1-r19
fixed in 1.36.1-r2
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-31789LOW3.53
openssl
1.1.1g-r0
fixed in 3.5.6-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-48174LOW3.53
ssl_client
1.31.1-r19
fixed in 1.36.1-r2
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2021-23840LOW3.51
openssl
1.1.1g-r0
fixed in 1.1.1j-r0
50.7%
Actively Exploited
Post-Exploit
CVE-2021-4044LOW3.51
openssl
1.1.1g-r0
fixed in 3.0.1-r0
50.1%
Actively Exploited
Post-Exploit
CVE-2022-0778LOW3.51
openssl
1.1.1g-r0
fixed in 3.0.2-r0
73.2%
Actively Exploited
Post-Exploit
CVE-2024-6119LOW3.51
openssl
1.1.1g-r0
fixed in 3.3.2-r0
66.6%
Actively Exploited
Post-Exploit
CVE-2021-3712LOW3.46
openssl
1.1.1g-r0
fixed in 1.1.1l-r0
50.4%
Actively Exploited
Post-Exploit
CVE-2025-9230LOW3.36
openssl
1.1.1g-r0
fixed in 3.5.4-r0
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2024-4741LOW3.36
openssl
1.1.1g-r0
fixed in 3.3.0-r3
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2025-4575LOW3.31
openssl
1.1.1g-r0
fixed in 3.5.1-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6042LOW3.3
musl-utils
1.1.24-r9
fixed in 1.2.6-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-0727LOW3.3
openssl
1.1.1g-r0
fixed in 3.1.4-r5
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-15469LOW3.3
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW3.3
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW3.3
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-27171LOW3.3
zlib
1.2.11-r3
fixed in 1.3.2-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2021-36159LOW3.28
apk-tools
2.10.5-r1
fixed in 2.12.6-r0
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-45445LOW3.28
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-40930LOW3.24
libpng
1.6.37-r1
fixed in 1.6.58-r1
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-1343LOW3.18
openssl
1.1.1g-r0
fixed in 3.0.3-r0
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-2097LOW3.18
openssl
1.1.1g-r0
fixed in 3.0.5-r0
4.9%
Low-Moderate Risk
Post-Exploit
CVE-2023-0465LOW3.18
openssl
1.1.1g-r0
fixed in 3.1.0-r2
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-3446LOW3.18
openssl
1.1.1g-r0
fixed in 3.1.1-r3
6.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-3817LOW3.18
openssl
1.1.1g-r0
fixed in 3.1.2-r0
3.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-5678LOW3.18
openssl
1.1.1g-r0
fixed in 3.1.4-r1
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2024-4603LOW3.18
openssl
1.1.1g-r0
fixed in 3.3.0-r2
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-42766LOW3.18
openssl
1.1.1g-r0
fixed in 3.5.7-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-42767LOW3.18
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34743LOW3.18
xz-libs
5.2.5-r0
fixed in 5.8.3-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-28391LOW3.17
busybox
1.31.1-r19
fixed in 1.35.0-r7
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2021-39537LOW3.17
ncurses-libs
6.2_p20200523-r0
fixed in 6.2_p20200530-r0
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2021-39537LOW3.17
ncurses-terminfo-base
6.2_p20200523-r0
fixed in 6.2_p20200530-r0
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-28391LOW3.17
ssl_client
1.31.1-r19
fixed in 1.35.0-r7
3.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-4450LOW3.1
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
28.6%
High Exploitation Risk
Post-Exploit
CVE-2022-4450LOW3.1
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
28.6%
High Exploitation Risk
Post-Exploit
CVE-2022-4450LOW3.1
openssl
1.1.1g-r0
fixed in 3.0.8-r0
28.6%
High Exploitation Risk
Post-Exploit
CVE-2025-9232LOW3.1
libcrypto1.1
1.1.1g-r0
fixed in 3.5.4-r0
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-9232LOW3.1
libssl1.1
1.1.1g-r0
fixed in 3.5.4-r0
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-1255LOW3.01
openssl
1.1.1g-r0
fixed in 3.1.0-r4
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
1.1.1g-r0
fixed in 3.5.7-r0
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-85091LOW3
zlib
1.2.11-r3
fixed in 1.3.2-r1
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-4203LOW2.94
openssl
1.1.1g-r0
fixed in 3.0.8-r0
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2026-28387LOW2.92
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28387LOW2.92
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28387LOW2.92
openssl
1.1.1g-r0
fixed in 3.5.6-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
openssl
1.1.1g-r0
fixed in 3.5.7-r0
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2024-2511LOW2.89
openssl
1.1.1g-r0
fixed in 3.2.1-r2
52.4%
Actively Exploited
Post-Exploit
CVE-2025-68160LOW2.82
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-30065LOW2.81
busybox
1.31.1-r19
fixed in 1.35.0-r17
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-40200LOW2.81
musl-utils
1.1.24-r9
fixed in 1.2.6-r2
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-30065LOW2.81
ssl_client
1.31.1-r19
fixed in 1.35.0-r17
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2021-42375LOW2.8
busybox
1.31.1-r19
fixed in 1.34.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42363LOW2.8
busybox
1.31.1-r19
fixed in 1.36.1-r27
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42364LOW2.8
busybox
1.31.1-r19
fixed in 1.36.1-r30
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42365LOW2.8
busybox
1.31.1-r19
fixed in 1.36.1-r30
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1.31.1-r19
fixed in 1.36.1-r25
0.4%
Theoretical Threat
Post-Exploit
CVE-2020-28928LOW2.8
musl-utils
1.1.24-r9
fixed in 1.2.2_pre2-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2021-42375LOW2.8
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42363LOW2.8
ssl_client
1.31.1-r19
fixed in 1.36.1-r27
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42364LOW2.8
ssl_client
1.31.1-r19
fixed in 1.36.1-r30
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42365LOW2.8
ssl_client
1.31.1-r19
fixed in 1.36.1-r30
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
ssl_client
1.31.1-r19
fixed in 1.36.1-r25
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-28831LOW2.7
busybox
1.31.1-r19
fixed in 1.33.0-r5
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-1473LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.3-r0
4.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-3358LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.6-r0
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-0215LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
5.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-0216LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0217LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0401LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-5363LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.1.4-r0
3.9%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-28390LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW2.7
libcrypto1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2022-1473LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.0.3-r0
4.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-3358LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.0.6-r0
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-0215LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
5.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-0216LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0217LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0401LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-5363LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.1.4-r0
3.9%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-28390LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.5.6-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW2.7
libssl1.1
1.1.1g-r0
fixed in 3.5.8-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2022-1473LOW2.7
openssl
1.1.1g-r0
fixed in 3.0.3-r0
4.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-3358LOW2.7
openssl
1.1.1g-r0
fixed in 3.0.6-r0
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-0215LOW2.7
openssl
1.1.1g-r0
fixed in 3.0.8-r0
5.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-0216LOW2.7
openssl
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0217LOW2.7
openssl
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-0401LOW2.7
openssl
1.1.1g-r0
fixed in 3.0.8-r0
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-5363LOW2.7
openssl
1.1.1g-r0
fixed in 3.1.4-r0
3.9%
Low-Moderate Risk
Post-Exploit
CVE-2025-69421LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-14456LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-28389LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.6-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-28390LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.6-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-18798LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2026-34183LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.7-r0
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-63072LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-63076LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-14457LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-54874LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63075LOW2.7
openssl
1.1.1g-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2021-28831LOW2.7
ssl_client
1.31.1-r19
fixed in 1.33.0-r5
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2021-42374LOW2.7
busybox
1.31.1-r19
fixed in 1.34.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-2975LOW2.7
openssl
1.1.1g-r0
fixed in 3.1.1-r2
0.6%
Theoretical Threat
Post-Exploit
CVE-2021-42374LOW2.7
ssl_client
1.31.1-r19
fixed in 1.34.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW2.66
libcrypto1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-34182LOW2.66
libssl1.1
1.1.1g-r0
fixed in 3.5.7-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2024-12797LOW2.66
openssl
1.1.1g-r0
fixed in 3.3.3-r0
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2025-69419LOW2.66
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW2.66
openssl
1.1.1g-r0
fixed in 3.5.7-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-64505LOW2.64
libpng
1.6.37-r1
fixed in 1.6.51-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-34757LOW2.64
libpng
1.6.37-r1
fixed in 1.6.57-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-58251LOW2.55
busybox
1.31.1-r19
fixed in 1.37.0-r24
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-58251LOW2.55
ssl_client
1.31.1-r19
fixed in 1.37.0-r24
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-13176LOW2.4
openssl
1.1.1g-r0
fixed in 3.3.2-r5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-107891LOW2.4
musl-utils
1.1.24-r9
fixed in 1.2.6-r6
—
Post-Exploit
CVE-2025-69418LOW2.4
openssl
1.1.1g-r0
fixed in 3.5.5-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2021-23839LOW2.22
openssl
1.1.1g-r0
fixed in 1.1.1j-r0
3.0%
Low-Moderate Risk
Post-Exploit
CVE-2024-9143LOW2.22
openssl
1.1.1g-r0
fixed in 3.3.2-r3
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2026-45446LOW2.22
openssl
1.1.1g-r0
fixed in 3.5.7-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW2.22
openssl
1.1.1g-r0
fixed in 3.5.8-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-9232LOW1.86
openssl
1.1.1g-r0
fixed in 3.5.4-r0
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1.31.1-r19
fixed in 1.37.0-r27
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
ssl_client
1.31.1-r19
fixed in 1.37.0-r27
0.2%
Theoretical Threat
Post-Exploit

Want to check another image? Run a full scan with the Docker Security Scanner.