Vulnerability Reportopenresty/openresty:1.31.1.1-alpine-fat-amd64

openresty/openresty:1.31.1.1-2-alpine-fat-amd64openresty/openresty:1.31-alpine-fat-amd64openresty/openresty:1.31.1.1-alpine-fat-amd64

DIGESTsha256:14e53c8af41a0dd185442185d9de298664d3a245b1ee2fe9c54132caffb4998c

Executive Summary

Last scanned: Jul 16, 2026

Threat ScoreSAFE• Threat score is 0, indicating no exploitable risk in typical deployment.• No findings from exposed surface or post-exploit analysis (both arrays empty).• Although 4 exposed and 12 post-exploit vulnerabilities exist, all are low severity (max 5.1 and 2.7).• Image is pinned by digest (immutable) and from a popular, reliable community publisher with 75M+ pulls.• No critical or high-severity CVEs (none ≥7.0) to address.

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (75M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. While vulnerability scans indicate 4 exposed and 12 post-exploit potential issues, all are low severity (maximum CVSS 5.1 and 2.7) and no exploitable paths were identified in the surface or post-exploit categories. The image is from a trusted community publisher, pinned by digest, and has a zero threat score, making it suitable for deployment without additional mitigation.

Vulnerabilities

Vulnerability Log

16 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-6276	MEDIUM5.1	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.3% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-5545	MEDIUM4.42	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.4% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-6429	MEDIUM4.42	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.5% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-5773	LOW3.83	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.5% Theoretical Threat	Directly Exposed
CVE-2026-4873	LOW2.7	curl 8.19.0-r0 fixed in 8.20.0-r0	0.3% Theoretical Threat	Post-Exploit
CVE-2026-6253	LOW2.7	curl 8.19.0-r0 fixed in 8.20.0-r0	0.6% Theoretical Threat	Post-Exploit
CVE-2026-7009	LOW2.7	curl 8.19.0-r0 fixed in 8.20.0-r0	0.3% Theoretical Threat	Post-Exploit
CVE-2026-7168	LOW2.7	curl 8.19.0-r0 fixed in 8.20.0-r0	0.5% Theoretical Threat	Post-Exploit
CVE-2026-4873	LOW2.7	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.3% Theoretical Threat	Post-Exploit
CVE-2026-6253	LOW2.7	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.6% Theoretical Threat	Post-Exploit
CVE-2026-7009	LOW2.7	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.3% Theoretical Threat	Post-Exploit
CVE-2026-7168	LOW2.7	libcurl 8.19.0-r0 fixed in 8.20.0-r0	0.5% Theoretical Threat	Post-Exploit
CVE-2026-5773	LOW2.29	curl 8.19.0-r0 fixed in 8.20.0-r0	0.5% Theoretical Threat	Post-Exploit
CVE-2026-6276	LOW2.29	curl 8.19.0-r0 fixed in 8.20.0-r0	0.3% Theoretical Threat	Post-Exploit
CVE-2026-5545	LOW1.99	curl 8.19.0-r0 fixed in 8.20.0-r0	0.4% Theoretical Threat	Post-Exploit
CVE-2026-6429	LOW1.99	curl 8.19.0-r0 fixed in 8.20.0-r0	0.5% Theoretical Threat	Post-Exploit

Want to check another image? Run a full scan with the Docker Security Scanner.