Vulnerability Reportnats:2.14.3

nats:2.14.3

digestsha256:67ac7866d010e8d83302dd30332eeae1a2b7a8ee051155e2eb5a5485b720cd4b

Executive Summary

Last scanned: Jul 31, 2026

Threat ScoreSAFE• Official Docker Hub image, pinned by digest, highly trusted with 520 stars and 241M pulls.• Only 2 exposed vulnerabilities found, both with low severity (max 3.6), and 1 post-exploit vulnerability (max 2.39).• No critical or high-severity vulnerabilities present; threat score is 0.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. Although there are 3 low-severity vulnerabilities (2 exposed, 1 post-exploit), their maximum CVSS score is 3.6, indicating negligible practical risk. The image is officially published by Docker and pinned by digest, ensuring immutability and integrity. No exploitable high-severity issues exist, so immediate remediation is not necessary.

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Result analysis
Plain-English summary of what actually matters — and why

Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

This report ran the first 3 stages — get the full report to unlock the rest.

Vulnerabilities

Vulnerability Log

3 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-42505	LOW3.6	stdlib v1.26.4 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2	0.4% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-39822	LOW2.39	stdlib v1.26.4 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2	0.2% Theoretical Threat	Post-Exploit
GO-2026-5932	NONE0	golang.org/x/crypto v0.53.0 No fix yet	—	Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.