Vulnerability Reportmilvusdb/milvus:master-20260618-f8b97b35-amd64

milvusdb/milvus:master-20260618-f8b97b35-amd64
digestsha256:fd69dde486f4f84045fcfdac6dc32de53c9fe5cc62a8dcacc4b01b8c4d5f9464

Executive Summary

Last scanned:

Threat Score
98/100DANGEROUS
Reputation
RELIABLE

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit CVE-2026-42010 to bypass authentication if RSA-PSK is enabled, or cause denial of service via CVE-2024-6119. Note: CVE-2026-42010 only applies if RSA-PSK authentication is configured; disabling that module fully eliminates that risk. Similarly, CVE-2024-37371 requires Kerberos to be enabled. Despite the image being from a popular trusted source, the high number and severity of exposed vulnerabilities make it dangerous for any exposed deployment.

Vulnerabilities

Vulnerability Log

201 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42010HIGH7.84
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2024-6119HIGH7.8
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.18
66.6%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2026-42009HIGH7.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-37371HIGH7.28
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2024-37371HIGH7.28
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2024-37371HIGH7.28
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2024-37371HIGH7.28
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-32990MEDIUM6.97
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-39822MEDIUM6.63
stdlib
v1.26.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-32988MEDIUM6.56
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.9.4-3ubuntu3
fixed in 1.9.4-3ubuntu3.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-41409MEDIUM6.38
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-28389MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28390MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-40898MEDIUM6.38
github.com/quic-go/quic-go
v0.54.1
fixed in 0.59.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-40735MEDIUM6
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.16
2.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-4802MEDIUM5.95
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.10
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4878MEDIUM5.95
libcap2
1:2.44-1ubuntu0.22.04.1
fixed in 1:2.44-1ubuntu0.22.04.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.9.4-3ubuntu3
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-5535MEDIUM5.9
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.18.0-4build1
fixed in 4.18.0-4ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.20
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-4741MEDIUM5.6
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
2.9%
Low-Moderate Risk
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.35-0ubuntu3.8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.35-0ubuntu3.8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-46848MEDIUM5.46
libtasn1-6
4.18.0-4build1
fixed in 4.18.0-4ubuntu0.2
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
<0.1%
Theoretical Threat
Directly Exposed
CVE-2024-12243MEDIUM5.3
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.6
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-32989MEDIUM5.3
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-4603MEDIUM5.3
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1-6
4.18.0-4build1
fixed in 4.18.0-4ubuntu0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.24.0-6build1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-1390MEDIUM5.18
libcap2
1:2.44-1ubuntu0.22.04.1
fixed in 1:2.44-1ubuntu0.22.04.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.35-0ubuntu3.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.35-0ubuntu3.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-31790MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-7008MEDIUM5.02
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-7008MEDIUM5.02
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-2511MEDIUM4.81
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
54.0%
Actively Exploited
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgomp1
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-58055MEDIUM4.59
libnghttp2-14
1.43.0-1ubuntu0.3
fixed in 1.43.0-1ubuntu0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.35-0ubuntu3.8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.35-0ubuntu3.8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2ubuntu1
fixed in 5.2.5-2ubuntu1.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-64702MEDIUM4.5
github.com/quic-go/quic-go
v0.54.1
fixed in 0.57.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42505MEDIUM4.5
stdlib
v1.26.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM4.25
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-15467MEDIUM4.06
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
47.6%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.19
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-9547LOW3.77
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-3596LOW3.73
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-3596LOW3.73
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-3596LOW3.73
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-3596LOW3.73
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-56406LOW3.72
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-9143LOW3.7
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.19
6.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-8058LOW3.57
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-9820LOW3.4
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-8924LOW3.31
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.8-1ubuntu2
fixed in 4.8-1ubuntu2.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3832LOW3.15
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-40909LOW3.01
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8925LOW2.92
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-8925LOW2.92
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.34+dfsg-1ubuntu0.1.22.04.2
fixed in 1.34+dfsg-1ubuntu0.1.22.04.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-27943LOW2.8
gcc-12-base
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1ubuntu0.1.22.04.2
fixed in 1.34+dfsg-1ubuntu0.1.22.04.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
249.11-0ubuntu3.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
249.11-0ubuntu3.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-33846LOW2.7
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-4899LOW2.7
libzstd1
1.4.8+dfsg-3build1
No fix yet
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-8286LOW2.48
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4ubuntu4.1
fixed in 1.10-4ubuntu4.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW2.29
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.10-4ubuntu4.1
fixed in 1.10-4ubuntu4.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW2.29
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW2.26
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncurses6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules-bin
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-runtime
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam0g
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libncurses6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libncursesw6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.21.1ubuntu2.3
fixed in 1.21.1ubuntu2.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Not Applicable
GHSA-xmrv-pmrh-hhx2NONE0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
v1.6.7
fixed in 1.7.8
Not Applicable
GHSA-xmrv-pmrh-hhx2NONE0
github.com/aws/aws-sdk-go-v2/service/bedrockruntime
v1.23.0
fixed in 1.50.4
Not Applicable
CVE-2026-2303NONE0
go.mongodb.org/mongo-driver
v1.13.1
fixed in 1.17.7
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.52.0
No fix yet
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.55.0
fixed in 0.56.0
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.37.0
fixed in 0.39.0
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.80.0
fixed in 1.82.1
Not Applicable
CVE-2026-26190NONE0
github.com/milvus-io/milvus
v0.10.3-0.20260618051223-f8b97b357749
fixed in 2.5.27, 2.6.10
27.7%
High Exploitation Risk
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.