Vulnerability Reportnats:2.12.12

nats:2.12.12

digestsha256:e0882ab68e01432c3593a20150d681c5c1dd97d50a36a097c6595d05f721fcfa

Executive Summary

Last scanned: Jul 31, 2026

Threat ScoreSAFE• Official Docker Hub image with perfect trust score (100/100).• Pinned by immutable digest, ensuring image integrity.• Only 3 very low severity vulnerabilities (max severity 3.6) from scan.• No exposed or post-exploit findings of practical concern.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. It contains a few low-severity vulnerabilities that pose no realistic risk in this context, due to their low CVSS scores and lack of exploitable conditions. The image is official, trusted, and pinned by digest, further reducing supply chain risk.

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Result analysis
Plain-English summary of what actually matters — and why

Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

This report ran the first 3 stages — get the full report to unlock the rest.

Vulnerabilities

Vulnerability Log

3 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-42505	LOW3.6	stdlib v1.25.11 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2	0.4% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-39822	LOW2.39	stdlib v1.25.11 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2	0.2% Theoretical Threat	Post-Exploit
GO-2026-5932	NONE0	golang.org/x/crypto v0.53.0 No fix yet	—	Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.