Vulnerability Reportnginxinc/nginx-unprivileged:1.31-alpine

nginxinc/nginx-unprivileged:alpine3.24nginxinc/nginx-unprivileged:alpinenginxinc/nginx-unprivileged:mainline-alpine3.24nginxinc/nginx-unprivileged:mainline-alpinenginxinc/nginx-unprivileged:1-alpine3.24nginxinc/nginx-unprivileged:1-alpinenginxinc/nginx-unprivileged:1.31-alpine3.24nginxinc/nginx-unprivileged:1.31-alpinenginxinc/nginx-unprivileged:1.31.3-alpine3.24nginxinc/nginx-unprivileged:1.31.3-alpine

digestsha256:18d67281256ded39ff65e010ae4f831be18f19356f83c60bc546492c7eb6dd23

Executive Summary

Last scanned: Jul 23, 2026

Threat ScoreSAFE• Verified publisher (nginxinc) with pinned digest ensures integrity.• No vulnerabilities detected in both exposed surface and post-exploit scans.• Image is highly popular with over 1.25 billion pulls, indicating widespread use.

0/100SAFE

ReputationVERIFIED• Verified Publisher (Trusted Vendor)• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. It comes from a trusted vendor (nginxinc) and is pinned by digest, guaranteeing immutability. The image is designed to run with reduced privileges, and vulnerability scanning found no known issues. Its massive adoption further supports its reliability.

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.