Vulnerability Reportopensearchproject/opensearch:3.3.1

opensearchproject/opensearch:3.3.1
digestsha256:773b05b026c01e7d520f6b857f486b7312d9290e14f2aebe4630eb80787e9eb3

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit CVE-2026-42581 to perform HTTP request smuggling against the OpenSearch API, potentially breaking request boundaries and enabling cache poisoning or request tunneling to backend services. Additionally, CVE-2026-34183 could lead to memory exhaustion and denial of service if the QUIC protocol is used, though OpenSearch's primary traffic is TCP/HTTP and QUIC is not indicated. The high number of exposed vulnerabilities (198) with several at severity >=7.0 requires immediate remediation, particularly upgrading Netty and OpenSSL/glib packages, before any production rollout.

Vulnerabilities

Vulnerability Log

302 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-34183HIGH7.5
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-34183HIGH7.5
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-58014HIGH7.31
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-58010MEDIUM6.97
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-58012MEDIUM6.97
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-58013MEDIUM6.97
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.16.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.16.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.17.1
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.17.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.124.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.125.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-54920MEDIUM6.7
org.apache.spark:spark-core_2.13
3.5.4
fixed in 4.0.1, 3.5.7
5.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-25210MEDIUM6.63
expat
2.6.3-1.amzn2023.0.3
fixed in 2.6.3-1.amzn2023.0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48864MEDIUM6.63
libsolv
0.7.22-1.amzn2023.0.2
fixed in 0.7.22-1.amzn2023.0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-13601MEDIUM6.54
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-767.amzn2023
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-58011MEDIUM6.38
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-58015MEDIUM6.38
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
krb5-libs
1.21.3-6.amzn2023.0.1
fixed in 1.21.3-7.amzn2023.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
krb5-libs
1.21.3-6.amzn2023.0.1
fixed in 1.21.3-7.amzn2023.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-58183MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-61728MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61729MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-33811MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-33814MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-39820MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42499MEDIUM6.38
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-41989MEDIUM6.38
libgcrypt
1.10.2-1.amzn2023.0.2
fixed in 1.10.2-1.amzn2023.0.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27135MEDIUM6.38
libnghttp2
1.59.0-3.amzn2023.0.1
fixed in 1.59.0-3.amzn2023.0.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-48863MEDIUM6.38
libsolv
0.7.22-1.amzn2023.0.2
fixed in 0.7.22-1.amzn2023.0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.124.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59901MEDIUM6.38
io.netty:netty-codec
4.1.124.Final
fixed in 4.1.136.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.124.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.125.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59901MEDIUM6.38
io.netty:netty-codec
4.1.125.Final
fixed in 4.1.136.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-55831MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55833MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56745MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56746MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59899MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-55831MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55833MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56745MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56746MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59899MEDIUM6.38
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.124.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.124.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.125.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.125.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.124.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.124.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.125.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.125.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42578MEDIUM6.38
io.netty:netty-handler-proxy
4.1.125.Final
fixed in 4.1.133.Final, 4.2.13.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-34478MEDIUM6.38
org.apache.logging.log4j:log4j-core
2.21.0
fixed in 2.25.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM6.38
org.apache.logging.log4j:log4j-core
2.21.0
fixed in 2.25.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2025-66566MEDIUM6.38
org.lz4:lz4-java
1.8.0
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl
2.3.1-2.amzn2023.0.2
fixed in 2.4.0-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-33871MEDIUM6
io.netty:netty-codec-http2
4.1.124.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-33871MEDIUM6
io.netty:netty-codec-http2
4.1.125.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-13151MEDIUM5.9
libtasn1
4.19.0-1.amzn2023.0.5
fixed in 4.19.0-1.amzn2023.0.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-42764MEDIUM5.9
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-42764MEDIUM5.9
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-56132MEDIUM5.87
expat
2.6.3-1.amzn2023.0.3
fixed in 2.6.3-1.amzn2023.0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56403MEDIUM5.87
expat
2.6.3-1.amzn2023.0.3
fixed in 2.6.3-1.amzn2023.0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56406MEDIUM5.87
expat
2.6.3-1.amzn2023.0.3
fixed in 2.6.3-1.amzn2023.0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56407MEDIUM5.87
expat
2.6.3-1.amzn2023.0.3
fixed in 2.6.3-1.amzn2023.0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-35554MEDIUM5.78
org.apache.kafka:kafka-clients
4.0.0
fixed in 3.9.2, 4.0.2, 4.1.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-61727MEDIUM5.52
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-9149MEDIUM5.52
libsolv
0.7.22-1.amzn2023.0.2
fixed in 0.7.22-1.amzn2023.0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-9150MEDIUM5.52
libsolv
0.7.22-1.amzn2023.0.2
fixed in 0.7.22-1.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-2673MEDIUM5.52
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-2673MEDIUM5.52
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.16.2
fixed in 2.18.8, 2.21.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.17.1
fixed in 2.18.8, 2.21.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 2.21.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59900MEDIUM5.52
io.netty:netty-codec-http2
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59900MEDIUM5.52
io.netty:netty-codec-http2
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-12183MEDIUM5.52
org.lz4:lz4-java
1.8.0
fixed in 1.8.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl
2.3.1-2.amzn2023.0.2
fixed in 2.4.0-1.amzn2023.0.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-34181MEDIUM5.35
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42768MEDIUM5.35
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34181MEDIUM5.35
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42768MEDIUM5.35
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-1757MEDIUM5.27
libxml2
2.10.4-1.amzn2023.0.13
fixed in 2.10.4-1.amzn2023.0.18
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-0990MEDIUM5.02
libxml2
2.10.4-1.amzn2023.0.13
fixed in 2.10.4-1.amzn2023.0.16
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-15468MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-66199MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42769MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-15468MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-66199MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42769MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34477MEDIUM5.02
org.apache.logging.log4j:log4j-core
2.21.0
fixed in 2.25.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-34180MEDIUM5
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-59921MEDIUM4.84
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59921MEDIUM4.84
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27142MEDIUM4.59
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39823MEDIUM4.59
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM4.5
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388MEDIUM4.5
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc
2.34-231.amzn2023.0.1
fixed in 2.34-231.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-common
2.34-231.amzn2023.0.1
fixed in 2.34-231.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-minimal-langpack
2.34-231.amzn2023.0.1
fixed in 2.34-231.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-47912MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58185MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-58186MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-58187MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58188MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58189MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-61723MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61724MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-61725MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-61730MEDIUM4.5
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.16.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.16.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.17.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.17.1
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59898MEDIUM4.5
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59898MEDIUM4.5
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.124.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.124.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.125.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.125.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
krb5-libs
1.21.3-6.amzn2023.0.1
fixed in 1.21.3-8.amzn2023.0.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-68161MEDIUM4.08
org.apache.logging.log4j:log4j-core
2.21.0
fixed in 2.25.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-15467MEDIUM4.06
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.4
47.6%
High Exploitation Risk
Post-Exploit
CVE-2025-15467MEDIUM4.06
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.4
47.6%
High Exploitation Risk
Post-Exploit
CVE-2025-68160MEDIUM4
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-24882LOW3.98
gnupg2-minimal
2.3.7-1.amzn2023.0.5
fixed in 2.3.7-1.amzn2023.0.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gnupg2-minimal
2.3.7-1.amzn2023.0.5
fixed in 2.3.7-1.amzn2023.0.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-13034LOW3.47
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-13034LOW3.47
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-69418LOW3.4
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.2.2-1.amzn2023.0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-12194LOW3.4
org.bouncycastle:bc-fips
2.1.1
fixed in 2.1.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-11563LOW3.31
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.11.1-4.amzn2023.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-11563LOW3.31
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.11.1-4.amzn2023.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-11972LOW3.31
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3805LOW3.21
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-3805LOW3.21
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.3
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-9086LOW3.18
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-9086LOW3.18
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-0989LOW3.15
libxml2
2.10.4-1.amzn2023.0.13
fixed in 2.10.4-1.amzn2023.0.17
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6019LOW3.11
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-68121LOW3.06
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.6
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-10966LOW3.01
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-10966LOW3.01
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9669LOW3.01
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-14087LOW3
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-769.amzn2023
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-6653LOW3
libxml2
2.10.4-1.amzn2023.0.13
fixed in 2.10.4-1.amzn2023.0.19
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-0864LOW2.8
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-13837LOW2.8
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-6075LOW2.8
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-8732LOW2.8
libxml2
2.10.4-1.amzn2023.0.13
fixed in 2.10.4-1.amzn2023.0.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-58016LOW2.78
glib2
2.82.2-766.amzn2023
fixed in 2.82.2-770.amzn2023
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42584LOW2.78
io.netty:netty-codec-http
4.1.124.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-42584LOW2.78
io.netty:netty-codec-http
4.1.125.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-61726LOW2.7
libcap
2.73-1.amzn2023.0.3
fixed in 2.73-1.amzn2023.0.6
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl-fips-provider-latest
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl-libs
1:3.2.2-1.amzn2023.0.2
fixed in 1:3.5.5-1.amzn2023.0.4
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-3276LOW2.7
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-12084LOW2.7
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.2
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-3446LOW2.7
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-15079LOW2.48
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-15079LOW2.48
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-6100LOW2.48
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-0992LOW2.46
libxml2
2.10.4-1.amzn2023.0.13
fixed in 2.10.4-1.amzn2023.0.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-10148LOW2.45
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15282LOW2.45
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0672LOW2.45
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.17.0-1.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3644LOW2.29
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-4224LOW2.29
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-7210LOW2.29
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-11468LOW2.29
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0865LOW2.29
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-8291LOW2.19
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.24-1.amzn2023.0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-1299LOW2.17
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-4786LOW2.17
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.5
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-11053LOW2.12
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2024-11053LOW2.12
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2025-13462LOW1.68
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-4519LOW1.68
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-2297LOW1.68
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3479LOW1.68
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gnupg2-minimal
2.3.7-1.amzn2023.0.5
fixed in 2.3.7-1.amzn2023.0.9
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-6100NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-3644NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4224NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-7210NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.8%
Theoretical Threat
Not Applicable
CVE-2025-66418NONE0
python3-pip-wheel
21.3.1-2.amzn2023.0.14
fixed in 21.3.1-2.amzn2023.0.15
0.6%
Theoretical Threat
Not Applicable
CVE-2025-66471NONE0
python3-pip-wheel
21.3.1-2.amzn2023.0.14
fixed in 21.3.1-2.amzn2023.0.15
0.6%
Theoretical Threat
Not Applicable
CVE-2026-21441NONE0
python3-pip-wheel
21.3.1-2.amzn2023.0.14
fixed in 21.3.1-2.amzn2023.0.16
2.7%
Low-Moderate Risk
Not Applicable
CVE-2026-1299NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-4786NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11972NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6019NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-9669NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6357NONE0
python3-pip-wheel
21.3.1-2.amzn2023.0.14
fixed in 21.3.1-2.amzn2023.0.19
0.1%
Theoretical Threat
Not Applicable
CVE-2026-0864NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.1%
Theoretical Threat
Not Applicable
CVE-2025-13837NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6075NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.1
0.1%
Theoretical Threat
Not Applicable
CVE-2026-8643NONE0
python3-pip-wheel
21.3.1-2.amzn2023.0.14
fixed in 21.3.1-2.amzn2023.0.20
0.3%
Theoretical Threat
Not Applicable
CVE-2026-3276NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.5%
Theoretical Threat
Not Applicable
CVE-2025-12084NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.2
0.7%
Theoretical Threat
Not Applicable
CVE-2026-3446NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15282NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.5%
Theoretical Threat
Not Applicable
CVE-2026-0672NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-11468NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.5%
Theoretical Threat
Not Applicable
CVE-2026-0865NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.5%
Theoretical Threat
Not Applicable
CVE-2025-8291NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.24-1.amzn2023.0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-1703NONE0
python3-pip-wheel
21.3.1-2.amzn2023.0.14
fixed in 21.3.1-2.amzn2023.0.17
0.4%
Theoretical Threat
Not Applicable
CVE-2025-13462NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4519NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-2297NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-3479NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.2%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
curl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid
2.37.4-1.amzn2023.0.4
fixed in 2.37.4-1.amzn2023.0.5
—
Not Applicable
CVE-2025-0167NONE0
libcurl-minimal
8.11.1-4.amzn2023.0.1
fixed in 8.15.0-4.amzn2023.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libmount
2.37.4-1.amzn2023.0.4
fixed in 2.37.4-1.amzn2023.0.5
—
Not Applicable
CVE-2026-53615NONE0
libsmartcols
2.37.4-1.amzn2023.0.4
fixed in 2.37.4-1.amzn2023.0.5
—
Not Applicable
CVE-2026-53615NONE0
libuuid
2.37.4-1.amzn2023.0.4
fixed in 2.37.4-1.amzn2023.0.5
—
Not Applicable
CVE-2026-11940NONE0
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-8328NONE0
python3
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.5%
Theoretical Threat
Not Applicable
CVE-2026-11940NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-8328NONE0
python3-libs
3.9.23-1.amzn2023.0.3
fixed in 3.9.25-1.amzn2023.0.7
0.5%
Theoretical Threat
Not Applicable
CVE-2026-11822NONE0
sqlite-libs
3.40.0-1.amzn2023.0.6
fixed in 3.40.0-1.amzn2023.0.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
sqlite-libs
3.40.0-1.amzn2023.0.6
fixed in 3.40.0-1.amzn2023.0.8
0.2%
Theoretical Threat
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.16.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.16.2
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.18.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.18.2
fixed in 2.21.1, 2.18.6
—
Not Applicable
CVE-2026-59889NONE0
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.21.5, 2.18.9, 2.22.1
0.3%
Theoretical Threat
Not Applicable
GHSA-mhm7-754m-9p8wNONE0
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.9, 2.21.5
—
Not Applicable
CVE-2026-33558NONE0
org.apache.kafka:kafka-clients
4.0.0
fixed in 3.9.2, 4.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-10050NONE0
org.eclipse.jetty:jetty-security
9.4.56.v20240826
fixed in 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10
—
Not Applicable
CVE-2026-59949NONE0
org.lz4:lz4-java
1.8.0
No fix yet
—
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.