Vulnerability Reportnats:2

nats:latestnats:2.14.4nats:2.14nats:2

digestsha256:ecf677bae6a0ae7900bd3217be041c6614d5dcd2cae780000f9cd69462b36541

Executive Summary

Last scanned: Jul 31, 2026

Threat ScoreSAFE• Pre-calculated threat score is 0, falling within the SAFE band (0-24).• Official Docker Hub image, pinned by immutable digest, and marked as TRUSTED with a score of 100.• Only 1 exposed surface finding, with maximum severity of 0.0 and no findings above 6.0.• No post-exploit findings and no exposed findings reaching high severity thresholds.• No CVE IDs are present in the exposed or post-exploit findings lists.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The single exposed surface item has a maximum severity of 0.0, indicating no practical exploitable risk. As an official Docker image pinned by digest, it benefits from publisher trust and immutability. No post-exploit findings or high-severity issues were identified in the provided inputs, so the overall threat risk is minimal.

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
GO-2026-5932	NONE0	golang.org/x/crypto v0.54.0 No fix yet	—	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.