Vulnerability Reportmetasploitframework/metasploit-framework:latest

metasploitframework/metasploit-framework:latestmetasploitframework/metasploit-framework:6.5.8
digestsha256:b1c4950615fec43bdbe915de7de4b144a24803b21765b86cf0df52799ab08776

Executive Summary

Last scanned:

Threat Score
25/100NEEDS ATTENTION
Reputation
UNVERIFIED

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main concern is CVE-2026-27820, a medium-severity zlib buffer overflow that can cause memory corruption when Metasploit processes gzipped data from a malicious target during module execution. The image has 21 exposed-surface findings, but only one is severity 6 or higher and none are severity 7 or higher; all 68 post-exploit findings are below severity 6. Upgrading the zlib gem to a fixed release would fully eliminate CVE-2026-27820. Trust signals are also limited because this is an unverified community image, though it is pinned by digest.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

158 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-27820MEDIUM6.66
zlib
3.1.1
fixed in ~> 3.0.1, ~> 3.1.2, >= 3.2.3
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77214MEDIUM5.58
libexpat
2.8.4-r0
fixed in 2.9.0-r0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-89160MEDIUM5.52
pcre2
10.43-r0
fixed in 10.43-r1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42258MEDIUM5.3
net-imap
0.4.19
fixed in ~> 0.4.24, ~> 0.5.14, >= 0.6.4
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-47240MEDIUM5.18
net-imap
0.4.19
fixed in ~> 0.5.15, >= 0.6.4.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-93990MEDIUM5.1
libexpat
2.8.4-r0
fixed in 2.8.5-r0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-102633MEDIUM5.02
libexpat
2.8.4-r0
fixed in 2.9.0-r0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
pcre2
10.43-r0
fixed in 10.43-r1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47241MEDIUM5.02
net-imap
0.4.19
fixed in ~> 0.5.15, >= 0.6.4.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib
1.3.1-r2
fixed in 1.3.2-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54905MEDIUM4.67
concurrent-ruby
1.3.5
fixed in >= 1.3.7
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73648MEDIUM4.59
rails-html-sanitizer
1.6.2
fixed in >= 1.7.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-14762MEDIUM4.5
aws-sdk-s3
1.182.0
fixed in >= 1.208.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58767MEDIUM4.5
rexml
3.3.9
fixed in >= 3.4.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58767MEDIUM4.5
rexml
3.4.1
fixed in >= 3.4.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73490MEDIUM4
loofah
2.24.1
fixed in >= 2.25.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-8927LOW3.82
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-54619LOW3.82
sqlite3
2.9.4
fixed in >= 2.9.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54620LOW3.82
sqlite3
2.9.4
fixed in >= 2.9.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-13034LOW3.47
curl
8.14.1-r2
fixed in 8.14.1-r3
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl
8.14.1-r2
fixed in 8.14.1-r3
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-13034LOW3.47
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-80213LOW3.4
resolv
0.3.0
fixed in ~> 0.3.2, >= 0.7.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-3784LOW3.31
curl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
curl
8.14.1-r2
fixed in 8.14.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
curl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-15661LOW3.31
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-58051LOW3.31
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-66032LOW3.31
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-66033LOW3.31
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3805LOW3.21
curl
8.14.1-r2
fixed in 8.14.1-r3
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-3805LOW3.21
libcurl
8.14.1-r2
fixed in 8.14.1-r3
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-66034LOW3.01
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-54906LOW3
concurrent-ruby
1.3.5
fixed in >= 1.3.7
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42257LOW3
net-imap
0.4.19
fixed in ~> 0.4.24, ~> 0.5.14, >= 0.6.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-41316LOW2.92
erb
4.0.3
fixed in ~> 4.0.3.1, ~> 4.0.4.1, ~> 6.0.1.1, >= 6.0.4
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-3783LOW2.91
curl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-3783LOW2.91
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
8.14.1-r2
fixed in 8.14.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
curl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-66035LOW2.7
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.51
pcre2
10.43-r0
fixed in 10.43-r1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
curl
8.14.1-r2
fixed in 8.14.1-r3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92392LOW2.48
curl
8.14.1-r2
fixed in 8.14.1-r3
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92392LOW2.48
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
pcre2
10.43-r0
fixed in 10.43-r1
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-22184LOW2.39
zlib
1.3.1-r2
fixed in 1.3.2-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.33
pcre2
10.43-r0
fixed in 10.43-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW2.29
curl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW2.29
curl
8.14.1-r2
fixed in 8.14.1-r3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW2.29
curl
8.14.1-r2
fixed in 8.14.1-r3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW2.29
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW2.29
libcurl
8.14.1-r2
fixed in 8.14.1-r3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-58050LOW2.29
libssh2
1.11.1-r2
fixed in 1.11.1-r3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-54904LOW2.29
concurrent-ruby
1.3.5
fixed in >= 1.3.7
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-42245LOW2.29
net-imap
0.4.19
fixed in ~> 0.4.24, ~> 0.5.14, >= 0.6.4
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-80212LOW2.29
resolv
0.3.0
fixed in ~> 0.3.2, >= 0.7.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-61594LOW2.29
uri
0.13.2
fixed in ~> 0.12.5, ~> 0.13.3, >= 1.0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-89157LOW2.26
pcre2
10.43-r0
fixed in 10.43-r1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42246LOW2.26
net-imap
0.4.19
fixed in ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-47242LOW2.23
net-imap
0.4.19
fixed in ~> 0.5.15, >= 0.6.4.1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89158LOW1.99
pcre2
10.43-r0
fixed in 10.43-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-43857LOW1.99
net-imap
0.4.19
fixed in ~> 0.2.5, ~> 0.3.9, ~> 0.4.20, >= 0.5.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42256LOW1.99
net-imap
0.4.19
fixed in ~> 0.4.24, ~> 0.5.14, >= 0.6.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1.37.0-r12
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox-binsh
1.37.0-r12
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
ssl_client
1.37.0-r12
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.24.0
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.9%
Theoretical Threat
Not Applicable
CVE-2026-39821NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.7%
Theoretical Threat
Not Applicable
CVE-2026-56858NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-40200NONE0
musl-utils
1.2.5-r9
fixed in 1.2.5-r11
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.24.0
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22874NONE0
stdlib
v1.24.0
fixed in 1.24.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.24.0
fixed in 1.24.12, 1.25.6
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.24.0
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.24.0
fixed in 1.25.8, 1.26.1
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.24.0
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.24.0
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.24.0
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.24.0
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33818NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.24.0
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56853NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56859NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56860NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56862NONE0
stdlib
v1.24.0
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78667NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78669NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-97031NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.24.0
fixed in 1.24.12, 1.25.6
0.7%
Theoretical Threat
Not Applicable
CVE-2025-47907NONE0
stdlib
v1.24.0
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Not Applicable
CVE-2026-111943NONE0
stdlib
v1.24.0
fixed in 1.26.10, 1.27.3
—
Not Applicable
CVE-2025-4673NONE0
stdlib
v1.24.0
fixed in 1.23.10, 1.24.4
0.7%
Theoretical Threat
Not Applicable
CVE-2025-47906NONE0
stdlib
v1.24.0
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.24.0
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-56866NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94439NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.24.0
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.24.0
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94448NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-97032NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6042NONE0
musl-utils
1.2.5-r9
fixed in 1.2.5-r10
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.24.0
fixed in 1.25.9, 1.26.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22871NONE0
stdlib
v1.24.0
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.24.0
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.24.0
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-22873NONE0
stdlib
v1.24.0
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.24.0
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.7%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.24.0
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.24.0
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.24.0
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78663NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
stdlib
v1.24.0
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-56857NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.24.0
fixed in 1.25.8, 1.26.1
0.1%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1.37.0-r12
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox-binsh
1.37.0-r12
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
CVE-2026-1965_1NONE0
curl
8.14.1-r2
fixed in 8.14.1-r3
—
Not Applicable
CVE-2026-1965_2NONE0
curl
8.14.1-r2
fixed in 8.14.1-r3
—
Not Applicable
CVE-2026-1965_1NONE0
libcurl
8.14.1-r2
fixed in 8.14.1-r3
—
Not Applicable
CVE-2026-1965_2NONE0
libcurl
8.14.1-r2
fixed in 8.14.1-r3
—
Not Applicable
CVE-2024-58251NONE0
ssl_client
1.37.0-r12
fixed in 1.37.0-r14
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib
1.3.1-r2
fixed in 1.3.2-r1
0.4%
Theoretical Threat
Not Applicable
GHSA-mwm8-39rw-8826NONE0
sqlite3
2.9.4
fixed in >= 2.9.6
—
Not Applicable
CVE-2025-0913NONE0
stdlib
v1.24.0
fixed in 1.23.10, 1.24.4
0.3%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.24.0
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78659NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
v1.24.0
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.