Vulnerability Reportnginxinc/nginx-unprivileged:1.31.1-alpine

nginxinc/nginx-unprivileged:1.31.1-alpine
digestsha256:cc300bd2e8776708a8c2c8686a74f06eadf221c5ce01e85d0e821955d7a730ab

Executive Summary

Last scanned:

Threat Score
62/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who could feed crafted Brotli-compressed data to this container could achieve code execution through CVE-2026-111497, which is already being exploited in the wild. That path exists only if Brotli decoding is switched on for untrusted input, which the default nginx configuration does not do. Not enabling Brotli decoding on untrusted input, or removing the brotli-libs package, fully eliminates this flaw. The remaining exposed findings are mostly denial-of-service issues that need HTTP/3 or QUIC listeners, which this default TCP setup does not use.

Hardening plan for this image · 5 steps. The first closes an actively exploited CVE.

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

186 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-111497HIGH8
brotli-libs
1.2.0-r0
fixed in 1.2.1-r0
55.5%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2026-42055MEDIUM6.48
nginx
1.31.1
No fix yet
6.5%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-42530MEDIUM6.48
nginx
1.31.1
No fix yet
6.5%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-89161MEDIUM6.24
pcre2
10.47-r0
fixed in 10.48-r0
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-14456MEDIUM6
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-18798MEDIUM6
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
1.7%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-63075MEDIUM6
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-14456MEDIUM6
libssl3
3.5.7-r0
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-18798MEDIUM6
libssl3
3.5.7-r0
fixed in 3.5.8-r0
1.7%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-63075MEDIUM6
libssl3
3.5.7-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-89157MEDIUM5.92
pcre2
10.47-r0
fixed in 10.48-r0
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-63073MEDIUM5.9
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-63073MEDIUM5.9
libssl3
3.5.7-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-89158MEDIUM5.2
pcre2
10.47-r0
fixed in 10.48-r0
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-89160MEDIUM5.2
pcre2
10.47-r0
fixed in 10.48-r0
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-85091MEDIUM5
zlib
1.3.2-r0
fixed in 1.3.2-r1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-48142MEDIUM4.8
nginx
1.31.1
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM4.72
pcre2
10.47-r0
fixed in 10.48-r0
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-63076MEDIUM4.5
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-14457MEDIUM4.5
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-63074MEDIUM4.5
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63076MEDIUM4.5
libssl3
3.5.7-r0
fixed in 3.5.8-r0
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-14457MEDIUM4.5
libssl3
3.5.7-r0
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-63074MEDIUM4.5
libssl3
3.5.7-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-107891MEDIUM4
musl
1.2.5-r23
fixed in 1.2.5-r24
—
Directly Exposed
CVE-2026-75803LOW3.7
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.7
libssl3
3.5.7-r0
fixed in 3.5.8-r0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-77214LOW2.95
libexpat
2.7.5-r0
fixed in 2.9.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.95
pcre2
10.47-r0
fixed in 10.48-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.92
curl
8.19.0-r0
fixed in 8.22.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8458LOW2.92
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8925LOW2.92
curl
8.19.0-r0
fixed in 8.22.0-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-92392LOW2.92
curl
8.19.0-r0
fixed in 8.23.0-r0
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-8286LOW2.92
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8458LOW2.92
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8925LOW2.92
libcurl
8.19.0-r0
fixed in 8.22.0-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-92392LOW2.92
libcurl
8.19.0-r0
fixed in 8.23.0-r0
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-78408LOW2.84
libuuid
2.41.4-r0
fixed in 2.41.6-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-76957LOW2.81
libexpat
2.7.5-r0
fixed in 2.8.4-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW2.81
libuuid
2.41.4-r0
fixed in 2.41.6-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW2.81
libuuid
2.41.4-r0
fixed in 2.41.6-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-4775LOW2.81
tiff
4.7.1-r0
fixed in 4.7.2-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.74
pcre2
10.47-r0
fixed in 10.49-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-33630LOW2.7
c-ares
1.34.6-r0
fixed in 1.34.8-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-11352LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-11586LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-12064LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW2.7
curl
8.19.0-r0
fixed in 8.20.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW2.7
curl
8.19.0-r0
fixed in 8.20.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8932LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9079LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-9545LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9546LOW2.7
curl
8.19.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW2.7
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.7
libcrypto3
3.5.7-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-11352LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-11586LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-12064LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW2.7
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW2.7
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8932LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9079LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-9545LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9546LOW2.7
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-45186LOW2.7
libexpat
2.7.5-r0
fixed in 2.8.1-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-66046LOW2.7
libexpat
2.7.5-r0
fixed in 2.8.4-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-76641LOW2.7
libexpat
2.7.5-r0
fixed in 2.8.4-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-76956LOW2.7
libexpat
2.7.5-r0
fixed in 2.8.4-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-93990LOW2.7
libexpat
2.7.5-r0
fixed in 2.8.5-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW2.7
libssl3
3.5.7-r0
fixed in 3.5.8-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.7
libssl3
3.5.7-r0
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW2.66
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW2.66
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-89162LOW2.64
pcre2
10.47-r0
fixed in 10.48-r0
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-9080LOW2.63
curl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9080LOW2.63
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW2.52
libuuid
2.41.4-r0
fixed in 2.41.6-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW2.52
libuuid
2.41.4-r0
fixed in 2.41.6-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW2.52
libuuid
2.41.4-r0
fixed in 2.41.6-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56132LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56403LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56404LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56405LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56406LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56407LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56408LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56410LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56411LOW2.48
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-86410LOW2.45
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86410LOW2.45
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-107891LOW2.4
musl-utils
1.2.5-r23
fixed in 1.2.5-r24
—
Post-Exploit
CVE-2026-11564LOW2.34
curl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-11856LOW2.34
curl
8.19.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-19931LOW2.34
curl
8.19.0-r0
fixed in 8.22.0-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-5545LOW2.34
curl
8.19.0-r0
fixed in 8.20.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW2.34
curl
8.19.0-r0
fixed in 8.20.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW2.34
curl
8.19.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-92388LOW2.34
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86414LOW2.34
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92390LOW2.34
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-11564LOW2.34
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-11856LOW2.34
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-19931LOW2.34
libcurl
8.19.0-r0
fixed in 8.22.0-r0
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-5545LOW2.34
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW2.34
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW2.34
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-92388LOW2.34
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86414LOW2.34
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92390LOW2.34
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-56409LOW2.34
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-86411LOW2.12
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-86411LOW2.12
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-102633LOW2.12
libexpat
2.7.5-r0
fixed in 2.9.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-50219LOW2.12
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56412LOW2.12
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-46675LOW2.12
libpng
1.6.58-r1
fixed in 1.6.59-r0
—
Post-Exploit
CVE-2026-4873LOW1.91
curl
8.19.0-r0
fixed in 8.20.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW1.91
curl
8.19.0-r0
fixed in 8.20.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7009LOW1.91
curl
8.19.0-r0
fixed in 8.20.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW1.91
curl
8.19.0-r0
fixed in 8.20.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-86409LOW1.91
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86412LOW1.91
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86413LOW1.91
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW1.91
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW1.91
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7009LOW1.91
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW1.91
libcurl
8.19.0-r0
fixed in 8.20.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-86409LOW1.91
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86412LOW1.91
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86413LOW1.91
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-82208LOW1.73
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8926LOW1.73
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-107928LOW1.73
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-82208LOW1.73
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8926LOW1.73
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-107928LOW1.73
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW1.69
curl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW1.69
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-56131LOW1.62
libexpat
2.7.5-r0
fixed in 2.8.2-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-92386LOW1.55
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92386LOW1.55
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-80256LOW1.44
curl
8.19.0-r0
fixed in 8.22.0-r0
—
Post-Exploit
CVE-2026-80256LOW1.44
libcurl
8.19.0-r0
fixed in 8.22.0-r0
—
Post-Exploit
CVE-2026-107929LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-13608LOW1.33
curl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-18924LOW1.33
curl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-80229LOW1.33
curl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-80230LOW1.33
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-80231LOW1.33
curl
8.19.0-r0
fixed in 8.22.0-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-80255LOW1.33
curl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-86415LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-87861LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-87862LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-87863LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-87864LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-87865LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-87866LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-92387LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92389LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92391LOW1.33
curl
8.19.0-r0
fixed in 8.23.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-107929LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-13608LOW1.33
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-18924LOW1.33
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-80229LOW1.33
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-80230LOW1.33
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-80231LOW1.33
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-80255LOW1.33
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-86415LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-87861LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-87862LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-87863LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-87864LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-87865LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-87866LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-92387LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92389LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-92391LOW1.33
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-41080LOW1.33
libexpat
2.7.5-r0
fixed in 2.8.1-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-94266LOW1.19
curl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-94266LOW1.19
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-82209LOW1.12
curl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-94265LOW1.12
curl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-82209LOW1.12
libcurl
8.19.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-94265LOW1.12
libcurl
8.19.0-r0
fixed in 8.23.0-r0
0.3%
Theoretical Threat
Post-Exploit

Want to check another image? Run a full scan with the Docker Security Scanner.