Vulnerability Reportnginx:1.31.6-alpine-slim

nginx:1.31.6-alpine-slim

digestsha256:f761b94f2cb9e8e05e2943d5f773609596113ef69b54e2433a996d109a8f78b7

Executive Summary

Last scanned: Oct 20, 2026

Threat ScoreSAFE• Threat score falls in the SAFE band; no DANGEROUS, CAUTION, or NEEDS_ATTENTION factors are indicated by the provided stats.• Official Docker Hub image pinned by digest, so supply-chain trust is high.• Vulnerability stats show exposed_total 1 and post_total 1, but exposed_count_ge6 is 0 and post_count_ge6 is 0.• Exposed max severity is 0.0 and post-exploit max severity is 2.33, below the attention thresholds.• No CVE IDs are present in the provided top findings.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The provided stats list one exposed-surface item and one post-exploit-only item, but neither reaches the high-severity thresholds. The maximum severities are 0.0 for exposed and 2.33 for post-exploit-only, and no CVE IDs are present in the top findings. The image is an official Docker Hub image pinned by digest, and the provided inputs do not indicate high-severity practical risk.

Vulnerabilities

Vulnerability Log

2 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-103111	LOW2.33	pcre2 10.48-r0 fixed in 10.49-r0	0.2% Theoretical Threat	Post-Exploit
CVE-2026-85091	NONE0	zlib 1.3.2-r0 fixed in 1.3.2-r1	0.4% Theoretical Threat	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.