Vulnerability Reportnginx:1.31.5-alpine-slim

nginx:1.31.5-alpine-slim
digestsha256:3b171d7224b669faa3cc2137fea0a65301791df1ec1f271ebd2a2b7461f7fade

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. It is an official Docker image pinned by digest, and its pre-calculated threat score is 0. Although the stats show 1 exposed_total entry and 1 post_total entry, there are no exposed or post-exploit-only findings at severity 6.0 or higher, and the maximum post-exploit severity is 2.33. No specific CVE IDs appear in the provided top findings, so there is no cited vulnerability that changes this verdict.

Vulnerabilities

Vulnerability Log

2 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-103111LOW2.33
pcre2
10.48-r0
fixed in 10.49-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-85091NONE0
zlib
1.3.2-r0
fixed in 1.3.2-r1
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.