Vulnerability Reportoven/bun:1.1.45-debian

oven/bun:1.1.45-debian
digestsha256:6b5cd8f884dfbdd7364ddd394af49cc1312bfa25b1ddc95fde8790bc035fe60d

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The top exposed findings are remotely exploitable denial-of-service vulnerabilities in GnuTLS and OpenSSL (e.g., CVE-2026-33846, CVE-2026-28388) that could crash the application or exhaust resources, impacting availability. While many of these require specific configurations such as DTLS or delta CRL processing, the sheer number of exposed vulnerabilities (42 with severity >= 6.0) increases the likelihood of one being reachable. If the deployment does not expose DTLS or enable delta CRL processing, the practical risk is reduced, but a full vulnerability management pass is still essential before considering production.

Vulnerabilities

Vulnerability Log

285 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2019-9192HIGH7.5
libc-bin
2.31-13+deb11u11
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-9192HIGH7.5
libc6
2.31-13+deb11u11
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-33560HIGH7.5
libgcrypt20
1.8.7-6
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-33846HIGH7.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-42009HIGH7.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-41409HIGH7.5
libpcre2-8-0
10.36-2+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-20838HIGH7.5
libpcre3
2:8.39-13
No fix yet
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388HIGH7.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-28389HIGH7.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-28390HIGH7.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-4899HIGH7.5
libzstd1
1.4.8+dfsg-2.1
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-32990MEDIUM6.97
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam-modules
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam-modules-bin
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam-runtime
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam0g
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.4%
Theoretical Threat
Directly Exposed
CVE-2020-13529MEDIUM6.1
libsystemd0
247.3-7+deb11u6
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-13529MEDIUM6.1
libudev1
247.3-7+deb11u6
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.2.53-10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u13
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u13
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc-bin
2.31-13+deb11u11
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc-bin
2.31-13+deb11u11
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc6
2.31-13+deb11u11
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc6
2.31-13+deb11u11
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.8.7-6
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.16.0-2+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42010MEDIUM5.88
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-4105MEDIUM5.7
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4105MEDIUM5.7
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u4
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.1-5+deb11u6
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.2.53-10
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.4.48-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.31-13+deb11u11
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.31-13+deb11u11
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-12243MEDIUM5.3
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u7
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1-6
4.16.0-2+deb11u1
fixed in 4.16.0-2+deb11u2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.23.22-1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.31-13+deb11u11
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.31-13+deb11u11
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-32988MEDIUM4.92
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u8
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u12
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u12
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam-modules
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam-modules-bin
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam-runtime
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam0g
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2017-16231MEDIUM4.67
libpcre3
2:8.39-13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845MEDIUM4.64
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2.1~deb11u1
fixed in 5.2.5-2.1~deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
247.3-7+deb11u6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
247.3-7+deb11u6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.31-13+deb11u11
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.31-13+deb11u11
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
gcc-10-base
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
gcc-9-base
9.3.0-22
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libgcc-s1
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules-bin
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-runtime
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam0g
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libstdc++6
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2019-8457MEDIUM4.06
libdb5.3
5.3.28+dfsg1-0.8
No fix yet
45.4%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules-bin
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-runtime
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam0g
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u3
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u7
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u7
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.31-13+deb11u11
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.31-13+deb11u11
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-3715LOW3.98
bash
5.1-2+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1+deb11u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-8058LOW3.57
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc-bin
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-9820LOW3.4
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u9
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2016-2781LOW3.31
coreutils
8.32-4+b1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.31-13+deb11u11
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.31-13+deb11u11
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-14104LOW3.11
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
8.32-4+b1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.32.1-4+deb11u4
fixed in 5.32.1-4+deb11u5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.32.1-4+deb11u4
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2017-7245LOW2.81
libpcre3
2:8.39-13
No fix yet
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-7246LOW2.81
libpcre3
2:8.39-13
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
passwd
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2013-4392LOW2.8
libsystemd0
247.3-7+deb11u6
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
247.3-7+deb11u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
247.3-7+deb11u6
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
247.3-7+deb11u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.31-13+deb11u11
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.31-13+deb11u11
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.8.7-6
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libk5crypto3
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5-3
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5support0
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2017-11164LOW2.7
libpcre3
2:8.39-13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.32.1-4+deb11u4
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.8.1-1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
8.32-4+b1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
passwd
1:4.8.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.10-4+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW2.29
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW2.29
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
8.32-4+b1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW2.24
coreutils
8.32-4+b1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-15649LOW1.99
perl-base
5.32.1-4+deb11u4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.32.1-4+deb11u4
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-68973NONE0
gpgv
2.2.27-2+deb11u2
fixed in 2.2.27-2+deb11u3
0.1%
Theoretical Threat
Not Applicable
CVE-2026-5958NONE0
sed
4.7-1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2023-4641NONE0
login
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.3%
Theoretical Threat
Not Applicable
CVE-2007-5686NONE0
login
1:4.8.1-1
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2013-4235NONE0
login
1:4.8.1-1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.8.1-1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-29383NONE0
login
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.4%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.1-2+deb11u1
No fix yet
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53910NONE0
diffutils
1:3.7-5
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.20.13
fixed in 1.20.14
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53615NONE0
libmount1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libmount1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2025-27587NONE0
libssl1.1
1.1.1w-0+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.8.1-1
No fix yet
Not Applicable
CVE-2026-53615NONE0
mount
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
mount
2.36.1-8+deb11u2
No fix yet
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.8.1-1
No fix yet
Not Applicable
CVE-2026-57433NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
2.96-7+deb11u1
No fix yet
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1+deb11u1
No fix yet
Not Applicable
DLA-4085-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2025a-0+deb11u1
Not Applicable
DLA-4105-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2025b-0+deb11u1
Not Applicable
DLA-4403-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2025b-0+deb11u2
Not Applicable
DLA-4569-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2026b-0+deb11u1
Not Applicable
CVE-2026-53615NONE0
util-linux
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
util-linux
2.36.1-8+deb11u2
No fix yet
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.