Vulnerability Reportnginxinc/nginx-unprivileged:1.31.7-alpine3.24

nginxinc/nginx-unprivileged:alpine3.24nginxinc/nginx-unprivileged:alpinenginxinc/nginx-unprivileged:mainline-alpine3.24nginxinc/nginx-unprivileged:mainline-alpinenginxinc/nginx-unprivileged:1-alpine3.24nginxinc/nginx-unprivileged:1-alpinenginxinc/nginx-unprivileged:1.31-alpine3.24nginxinc/nginx-unprivileged:1.31-alpinenginxinc/nginx-unprivileged:1.31.7-alpine3.24nginxinc/nginx-unprivileged:1.31.7-alpine

digestsha256:b5047b9b76845eac124358373c6852377c52e4b05834a47647e955dd91cb8f1e

Executive Summary

Last scanned: Oct 20, 2026

Threat ScoreSAFE• Verified publisher (nginxinc) with pinned digest ensures integrity.• No vulnerabilities detected in both exposed surface and post-exploit scans.• Image is highly popular with over 1.25 billion pulls, indicating widespread use.

0/100SAFE

ReputationVERIFIED• Verified Publisher (Trusted Vendor)• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. It comes from a trusted vendor (nginxinc) and is pinned by digest, guaranteeing immutability. The image is designed to run with reduced privileges, and vulnerability scanning found no known issues. Its massive adoption further supports its reliability.

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.