Vulnerability Reportmilvusdb/milvus:v3.0-beta

milvusdb/milvus:v3.0-beta
DIGESTsha256:0a030f267a16358901c662adac02813027ace9e23bfbe6db66528e4fd1c28168

Executive Summary

Last scanned:

Threat Score
100/100DANGEROUS
Reputation
UNVERIFIED

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit CVE-2021-46848 to leak sensitive data or crash the service via a crafted client certificate, or trigger denial of service via CVE-2024-6119 when the container initiates TLS connections. Note that CVE-2026-42010 only applies if RSA-PSK cipher suites are enabled, which are non-default. The image also contains 164 exposed vulnerabilities, and its low community trust further increases risk.

Vulnerabilities

Vulnerability Log

232 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2021-46848CRITICAL9.1
libtasn1-6
4.18.0-4build1
fixed in 4.18.0-4ubuntu0.2
2.1%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2026-42010HIGH7.84
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2024-6119HIGH7.8
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.18
66.6%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2026-33846HIGH7.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-42009HIGH7.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-41602HIGH7.5
github.com/apache/thrift
v0.20.0
fixed in 0.23.0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-39828HIGH7.48
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39832HIGH7.39
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-32990MEDIUM6.97
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-39821MEDIUM6.97
golang.org/x/net
v0.48.0
fixed in 0.55.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-39831MEDIUM6.88
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-25681MEDIUM6.88
golang.org/x/net
v0.48.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27136MEDIUM6.88
golang.org/x/net
v0.48.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-39822MEDIUM6.63
stdlib
v1.25.9
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-32988MEDIUM6.56
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.9.4-3ubuntu3
fixed in 1.9.4-3ubuntu3.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2022-41409MEDIUM6.38
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28389MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28390MEDIUM6.38
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-40898MEDIUM6.38
github.com/quic-go/quic-go
v0.54.1
fixed in 0.59.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39882MEDIUM6.38
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
v1.20.0
fixed in 1.43.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-39829MEDIUM6.38
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39830MEDIUM6.38
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-39835MEDIUM6.38
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-46597MEDIUM6.38
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-33814MEDIUM6.38
golang.org/x/net
v0.48.0
fixed in 0.53.0
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-27145MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.11, 1.26.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-33811MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-33814MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39820MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39836MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42499MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42504MEDIUM6.38
stdlib
v1.25.9
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42508MEDIUM6.29
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-46595MEDIUM6.03
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-40735MEDIUM6
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.16
2.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-4802MEDIUM5.95
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.10
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4878MEDIUM5.95
libcap2
1:2.44-1ubuntu0.22.04.1
fixed in 1:2.44-1ubuntu0.22.04.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-10814MEDIUM5.95
github.com/milvus-io/milvus
v0.10.3-0.20260508013206-63701018b178+dirty
fixed in 0.10.3-0.20260602041816-3d932f1c3e06
<0.1%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.9.4-3ubuntu3
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-5535MEDIUM5.9
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.18.0-4build1
fixed in 4.18.0-4ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.20
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-4741MEDIUM5.6
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
2.9%
Low-Moderate Risk
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.35-0ubuntu3.8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.35-0ubuntu3.8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-39827MEDIUM5.52
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-39834MEDIUM5.52
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-25680MEDIUM5.52
golang.org/x/net
v0.48.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-39825MEDIUM5.52
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.19
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
<0.1%
Theoretical Threat
Directly Exposed
CVE-2024-12243MEDIUM5.3
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.6
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-32989MEDIUM5.3
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.7
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-4603MEDIUM5.3
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1-6
4.18.0-4build1
fixed in 4.18.0-4ubuntu0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.24.0-6build1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-1390MEDIUM5.18
libcap2
1:2.44-1ubuntu0.22.04.1
fixed in 1:2.44-1ubuntu0.22.04.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42502MEDIUM5.18
golang.org/x/net
v0.48.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.35-0ubuntu3.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.35-0ubuntu3.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-31790MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-7008MEDIUM5.02
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-7008MEDIUM5.02
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-2511MEDIUM4.81
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.17
54.0%
Actively Exploited
Directly Exposed
CVE-2022-27943MEDIUM4.67
gcc-12-base
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgfortran5
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgomp1
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libquadmath0
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-39833MEDIUM4.67
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-58055MEDIUM4.59
libnghttp2-14
1.43.0-1ubuntu0.3
fixed in 1.43.0-1ubuntu0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42506MEDIUM4.59
golang.org/x/net
v0.48.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-39823MEDIUM4.59
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39826MEDIUM4.59
stdlib
v1.25.9
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.35-0ubuntu3.8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.13
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.35-0ubuntu3.8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2ubuntu1
fixed in 5.2.5-2ubuntu1.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-64702MEDIUM4.5
github.com/quic-go/quic-go
v0.54.1
fixed in 0.57.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-46598MEDIUM4.5
golang.org/x/crypto
v0.46.0
fixed in 0.52.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42505MEDIUM4.5
stdlib
v1.25.9
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42507MEDIUM4.5
stdlib
v1.25.9
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM4.25
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-15467MEDIUM4.06
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
47.6%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.19
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libsystemd0
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libudev1
249.11-0ubuntu3.12
fixed in 249.11-0ubuntu3.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-8927LOW3.82
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-3596LOW3.73
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-3596LOW3.73
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-3596LOW3.73
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-3596LOW3.73
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.5
14.9%
High Exploitation Risk
Post-Exploit
CVE-2024-56406LOW3.72
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-9143LOW3.7
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.19
6.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-8058LOW3.57
libc-bin
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.35-0ubuntu3.8
fixed in 2.35-0ubuntu3.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-9820LOW3.4
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.21
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-8924LOW3.31
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2024-37371LOW3.28
libgssapi-krb5-2
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2024-37371LOW3.28
libk5crypto3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2024-37371LOW3.28
libkrb5-3
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2024-37371LOW3.28
libkrb5support0
1.19.2-2ubuntu0.3
fixed in 1.19.2-2ubuntu0.4
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.8-1ubuntu2
fixed in 4.8-1ubuntu2.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3832LOW3.15
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42770LOW3.01
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8925LOW2.92
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-8925LOW2.92
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.34+dfsg-1ubuntu0.1.22.04.2
fixed in 1.34+dfsg-1ubuntu0.1.22.04.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1ubuntu0.1.22.04.2
fixed in 1.34+dfsg-1ubuntu0.1.22.04.5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
249.11-0ubuntu3.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
249.11-0ubuntu3.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30
3.7.3-4ubuntu1.5
fixed in 3.7.3-4ubuntu1.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.34.0-3ubuntu1.3
fixed in 5.34.0-3ubuntu1.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-28388LOW2.7
libssl3
3.0.2-0ubuntu1.15
fixed in 3.0.2-0ubuntu1.23
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-4899LOW2.7
libzstd1
1.4.8+dfsg-3build1
No fix yet
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW2.55
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4ubuntu4.1
fixed in 1.10-4ubuntu4.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.37.2-4ubuntu3.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW2.29
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.10-4ubuntu4.1
fixed in 1.10-4ubuntu4.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncurses6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules-bin
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-runtime
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam0g
1.4.0-11ubuntu2.4
fixed in 1.4.0-11ubuntu2.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libncurses6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libncursesw6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
curl
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.21.1ubuntu2.3
fixed in 1.21.1ubuntu2.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
libcurl4
7.81.0-1ubuntu1.24
fixed in 7.81.0-1ubuntu1.25
0.5%
Theoretical Threat
Not Applicable
GHSA-xmrv-pmrh-hhx2NONE0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
v1.6.7
fixed in 1.7.8
Not Applicable
GHSA-xmrv-pmrh-hhx2NONE0
github.com/aws/aws-sdk-go-v2/service/bedrockruntime
v1.23.0
fixed in 1.50.4
Not Applicable
CVE-2026-2303NONE0
go.mongodb.org/mongo-driver
v1.13.1
fixed in 1.17.7
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.46.0
No fix yet
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.48.0
fixed in 0.56.0
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.42.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.32.0
fixed in 0.39.0
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.79.3
fixed in 1.82.1
Not Applicable
CVE-2026-26190NONE0
github.com/milvus-io/milvus
v0.10.3-0.20260508013206-63701018b178+dirty
fixed in 2.5.27, 2.6.10
27.7%
High Exploitation Risk
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.