Vulnerability Reportnode:26.5.1-alpine3.23

node:current-alpine3.23node:alpine3.23node:26.5.1-alpine3.23node:26.5-alpine3.23node:26-alpine3.23

digestsha256:2a633e101381371ba148c7c212bf447c00cd267d814b708a9fe52c4984204729

Executive Summary

Last scanned: Jul 31, 2026

Threat ScoreSAFE• Official Docker Hub image with trusted verdict (score 100)• Pinned by digest (immutable) — 'node@sha256:...'• 0 vulnerabilities in exposed surface findings• 0 vulnerabilities in post-exploit-only findings• Threat score is 0 (lowest band)

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This base/runtime image is a clean foundation for building production images. The scan found no exposed-surface or post-exploit-only vulnerabilities for this Node.js runtime image. As a Docker Official Image pinned by digest, it provides a reproducible and trusted base for your application layers. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Result analysis
Plain-English summary of what actually matters — and why

Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

This report ran the first 3 stages — get the full report to unlock the rest.

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.