Vulnerability Reportmilvusdb/milvus:v3.0.5

milvusdb/milvus:v3.0.5

digestsha256:b9b79b4a284b41cd12d60abc418310f84621fa4c977d409b38f501519a7ccf8a

Executive Summary

Last scanned: Nov 12, 2026

Threat ScoreSAFE• The scan found 29 exposed-surface vulnerabilities, but none are rated high or severe and none are listed as actively exploited, so none set the verdict.• The highest exposed-surface severity in the scan is 5.52, which is low for a component reachable in normal operation.• 13 post-exploit-only findings were recorded, with a maximum severity of 3.3, so they matter only after the container is already compromised.• The image is pinned by digest and comes from a widely used community publisher, with a reliability verdict of RELIABLE.• The container exposes no ports and runs as a non-root user (milvus:milvus), which limits direct network reach.

6/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (79M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. The scan did find 29 vulnerabilities that are reachable in normal operation, but their severity is low, with the highest scoring 5.52, and none are known to be actively exploited. The 13 findings that only matter after an attacker already has control of the container have a maximum severity of 3.3 and do not affect this verdict. Routine patching is still advisable as good hygiene.

Already in good shape · 3 hardening steps left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

42 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-88647	MEDIUM5.52	libgnutls30 3.7.3-4ubuntu1.9 No fix yet	0.2% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-103111	MEDIUM5.52	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.3% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-86145	MEDIUM5.52	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.4% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-111943	MEDIUM5.44	stdlib v1.26.9 fixed in 1.26.10, 1.27.3	0.4% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-18374	MEDIUM4.9	libc-bin 2.35-0ubuntu3.15 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-18374	MEDIUM4.9	libc6 2.35-0ubuntu3.15 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-89156	MEDIUM4.72	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.3% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-89092	MEDIUM4.2	libc-bin 2.35-0ubuntu3.15 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-89092	MEDIUM4.2	libc6 2.35-0ubuntu3.15 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-88648	MEDIUM4.14	libgnutls30 3.7.3-4ubuntu1.9 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-89157	MEDIUM4.14	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2026-89161	MEDIUM4.14	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-107161	MEDIUM4.14	libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-107161	MEDIUM4.14	libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-95209	MEDIUM4	libgnutls30 3.7.3-4ubuntu1.9 No fix yet	0.2% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-95210	MEDIUM4	libgnutls30 3.7.3-4ubuntu1.9 No fix yet	0.2% Theoretical Threat	Directly ExposedContext importance: MEDIUM
GO-2026-5932	MEDIUM4	golang.org/x/crypto v0.57.0 No fix yet	—	Directly Exposed
CVE-2026-89158	LOW3.9	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-89160	LOW3.9	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2022-4899	LOW3.9	libzstd1 1.4.8+dfsg-3build1 No fix yet	1.6% Low-Moderate Risk	Directly Exposed
CVE-2026-67693	LOW3.54	libgnutls30 3.7.3-4ubuntu1.9 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2022-27943	LOW3.31	gcc-12-base 12.3.0-1ubuntu1~22.04.3 No fix yet	1.0% Theoretical Threat	Directly Exposed
CVE-2022-27943	LOW3.31	libgcc-s1 12.3.0-1ubuntu1~22.04.3 No fix yet	1.0% Theoretical Threat	Directly Exposed
CVE-2022-27943	LOW3.31	libgomp1 12.3.0-1ubuntu1~22.04.3 No fix yet	1.0% Theoretical Threat	Directly Exposed
CVE-2022-27943	LOW3.31	libstdc++6 12.3.0-1ubuntu1~22.04.3 No fix yet	1.0% Theoretical Threat	Directly Exposed
CVE-2026-102473	LOW3.3	dash 0.5.11+git20210903+057cd650a4ed-3build1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-40228	LOW3.3	libsystemd0 249.11-0ubuntu3.23 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-40228	LOW3.3	libudev1 249.11-0ubuntu3.23 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-95184	LOW3.18	libgnutls30 3.7.3-4ubuntu1.9 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2022-41409	LOW3.12	libpcre2-8-0 10.39-3ubuntu0.1 No fix yet	1.1% Low-Moderate Risk	Directly ExposedContext importance: MEDIUM
CVE-2026-18477	LOW2.64	tar 1.34+dfsg-1ubuntu0.1.22.04.6 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-18508	LOW2.64	tar 1.34+dfsg-1ubuntu0.1.22.04.6 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-102474	LOW2.4	dash 0.5.11+git20210903+057cd650a4ed-3build1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2023-50495	LOW2.34	libncurses6 6.3-2ubuntu0.3 No fix yet	1.0% Low-Moderate Risk	Post-Exploit
CVE-2023-50495	LOW2.34	libncursesw6 6.3-2ubuntu0.3 No fix yet	1.0% Low-Moderate Risk	Post-Exploit
CVE-2023-50495	LOW2.34	libtinfo6 6.3-2ubuntu0.3 No fix yet	1.0% Low-Moderate Risk	Post-Exploit
CVE-2023-50495	LOW2.34	ncurses-base 6.3-2ubuntu0.3 No fix yet	1.0% Low-Moderate Risk	Post-Exploit
CVE-2023-50495	LOW2.34	ncurses-bin 6.3-2ubuntu0.3 No fix yet	1.0% Low-Moderate Risk	Post-Exploit
CVE-2024-56433	LOW1.84	login 1:4.8.1-2ubuntu2.2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2024-56433	LOW1.84	passwd 1:4.8.1-2ubuntu2.2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2023-29383	LOW1.68	login 1:4.8.1-2ubuntu2.2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2023-29383	LOW1.68	passwd 1:4.8.1-2ubuntu2.2 No fix yet	0.4% Theoretical Threat	Post-Exploit

Want to check another image? Run a full scan with the Docker Security Scanner.