Vulnerability Reportmongo:8.3.9

mongo:8.3.9
digestsha256:81a1c8842a09589fc8d5f285266f3340bf4abdf66700ba22988f14cc9b2b3118

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. It is an official Docker Hub image pinned by digest, which provides strong trust and immutability. Although INPUT 3 reports 46 exposed-surface entries and 48 post-exploit-only entries, none reach severity 6.0 or higher; the maximum severities are 5.78 and 2.91. No top exposed or post-exploit findings were supplied, so there are no specific CVE IDs to highlight as blocking issues.

Vulnerabilities

Vulnerability Log

173 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-19499MEDIUM5.78
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-86145MEDIUM5.58
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-89161MEDIUM5.3
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-103111MEDIUM5.17
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77117MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-97032MEDIUM5.02
golang.org/x/net
v0.56.0
fixed in 0.60.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-41256MEDIUM4.67
libjq1
1.7.1-3ubuntu0.24.04.2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41257MEDIUM4.67
libjq1
1.7.1-3ubuntu0.24.04.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-43896MEDIUM4.67
libjq1
1.7.1-3ubuntu0.24.04.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-44777MEDIUM4.67
libjq1
1.7.1-3ubuntu0.24.04.2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-61801MEDIUM4.67
github.com/moby/sys/user
v0.1.0
fixed in 0.4.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-64718MEDIUM4.5
js-yaml
3.13.1
fixed in 4.1.1, 3.14.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53550MEDIUM4.5
js-yaml
3.13.1
fixed in 4.2.0, 3.15.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56855MEDIUM4.5
golang.org/x/crypto
v0.54.0
fixed in 0.56.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-78662MEDIUM4.5
golang.org/x/crypto
v0.54.0
fixed in 0.56.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-78663MEDIUM4.5
golang.org/x/net
v0.56.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM4.02
libssl3t64
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-43895LOW3.74
libjq1
1.7.1-3ubuntu0.24.04.2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.15
libssl3t64
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-15534LOW2.91
perl-base
5.38.2-3.2ubuntu0.4
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41256LOW2.8
jq
1.7.1-3ubuntu0.24.04.2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-41257LOW2.8
jq
1.7.1-3ubuntu0.24.04.2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-43896LOW2.8
jq
1.7.1-3ubuntu0.24.04.2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-44777LOW2.8
jq
1.7.1-3ubuntu0.24.04.2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.17
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.17
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-75806LOW2.7
openssl
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-86414LOW2.34
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-92388LOW2.34
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-107161LOW2.29
libsasl2-2
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-107161LOW2.29
libsasl2-modules
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-107161LOW2.29
libsasl2-modules-db
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59869LOW2.29
js-yaml
3.13.1
fixed in 3.15.0, 4.3.0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-84375LOW2.29
js-yaml
3.13.1
fixed in 4.3.2, 3.15.2
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-78669LOW2.29
golang.org/x/net
v0.56.0
fixed in 0.60.0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-88647LOW2.26
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89157LOW2.26
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW2.26
libssl3t64
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW2.26
openssl
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-43895LOW2.24
jq
1.7.1-3ubuntu0.24.04.2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-87862LOW2.22
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-87863LOW2.22
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-87864LOW2.22
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-92389LOW2.22
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-92391LOW2.22
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-56854LOW2.08
golang.org/x/crypto
v0.54.0
fixed in 0.55.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89158LOW1.99
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-89160LOW1.99
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW1.99
perl-base
5.38.2-3.2ubuntu0.4
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-94266LOW1.98
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-86409LOW1.91
libcurl4t64
8.5.0-2ubuntu10.13
No fix yet
—
Post-Exploit
CVE-2026-13608LOW1.89
libcurl4t64
8.5.0-2ubuntu10.13
fixed in 8.5.0-2ubuntu10.15
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-18924LOW1.89
libcurl4t64
8.5.0-2ubuntu10.13
fixed in 8.5.0-2ubuntu10.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-80230LOW1.89
libcurl4t64
8.5.0-2ubuntu10.13
fixed in 8.5.0-2ubuntu10.15
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6791LOW1.81
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-6791LOW1.81
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-67693LOW1.81
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW1.81
libssl3t64
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-54872LOW1.81
openssl
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW1.81
openssl
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW1.81
openssl
3.0.13-0ubuntu3.15
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-82209LOW1.58
libcurl4t64
8.5.0-2ubuntu10.13
fixed in 8.5.0-2ubuntu10.15
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.24.6
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.9%
Theoretical Threat
Not Applicable
CVE-2026-39821NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.7%
Theoretical Threat
Not Applicable
CVE-2026-39821NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.7%
Theoretical Threat
Not Applicable
CVE-2026-56858NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-56858NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.24.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-33818NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46600NONE0
stdlib
v1.26.5
fixed in 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56853NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56859NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56860NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56862NONE0
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78667NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78669NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-97031NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.24.6
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33818NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56853NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56859NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56860NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56862NONE0
stdlib
v1.24.6
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78667NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78669NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-97031NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
0.7%
Theoretical Threat
Not Applicable
CVE-2026-56866NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94439NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.24.6
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-56866NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94439NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94448NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94448NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-97032NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97032NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78663NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.24.6
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.7%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.24.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78663NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56857NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56857NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.1%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
GHSA-5p4m-2wfm-xmqjNONE0
js-yaml
3.13.1
fixed in 4.3.1, 3.15.1
—
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.54.0
No fix yet
—
Not Applicable
CVE-2026-78659NONE0
golang.org/x/net
v0.56.0
fixed in 0.60.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
golang.org/x/net
v0.56.0
fixed in 0.60.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-56851NONE0
golang.org/x/text
v0.40.0
fixed in 0.41.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-78659NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.1.0
fixed in 0.44.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78659NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
v1.24.6
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.