Vulnerability Reportoven/bun:1.2.1-debian

oven/bun:1.2.1-debian
digestsha256:e5127b019936830bff658b42b963b76f0a11dd49ab4b2b375965e75771586603

Executive Summary

Last scanned:

Threat Score
98/100DANGEROUS
Reputation
RELIABLE

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit CVE-2026-42010 to bypass authentication and gain unauthorized access, or trigger denial-of-service crashes via remote flaws such as CVE-2026-33846. Note: CVE-2026-42010 requires GnuTLS RSA-PSK mode, and CVE-2026-33846 requires DTLS; the startup command does not indicate these are enabled. Nevertheless, the presence of 185 exposed vulnerabilities, including 12 high-severity issues, makes this image unsuitable for production without extensive hardening.

Vulnerabilities

Vulnerability Log

285 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42010HIGH7.84
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2019-9192HIGH7.5
libc-bin
2.31-13+deb11u11
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-9192HIGH7.5
libc6
2.31-13+deb11u11
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-33560HIGH7.5
libgcrypt20
1.8.7-6
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-33846HIGH7.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-42009HIGH7.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-41409HIGH7.5
libpcre2-8-0
10.36-2+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-20838HIGH7.5
libpcre3
2:8.39-13
No fix yet
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388HIGH7.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-28389HIGH7.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-28390HIGH7.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-4899HIGH7.5
libzstd1
1.4.8+dfsg-2.1
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-32990MEDIUM6.97
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam-modules
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam-modules-bin
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam-runtime
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6020MEDIUM6.63
libpam0g
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69720MEDIUM6.63
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.4%
Theoretical Threat
Directly Exposed
CVE-2020-13529MEDIUM6.1
libsystemd0
247.3-7+deb11u6
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-13529MEDIUM6.1
libudev1
247.3-7+deb11u6
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.2.53-10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u13
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u13
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc-bin
2.31-13+deb11u11
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc-bin
2.31-13+deb11u11
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc6
2.31-13+deb11u11
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc6
2.31-13+deb11u11
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.8.7-6
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.18.3-6+deb11u5
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.16.0-2+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-4105MEDIUM5.7
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4105MEDIUM5.7
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u4
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.1-5+deb11u6
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.2.53-10
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.4.48-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.31-13+deb11u11
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.31-13+deb11u11
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-12243MEDIUM5.3
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u7
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1-6
4.16.0-2+deb11u1
fixed in 4.16.0-2+deb11u2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.23.22-1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.31-13+deb11u11
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.31-13+deb11u11
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u5
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u5
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-32988MEDIUM4.92
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u8
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u12
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u12
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam-modules
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam-modules-bin
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam-runtime
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-22365MEDIUM4.67
libpam0g
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Directly Exposed
CVE-2017-16231MEDIUM4.67
libpcre3
2:8.39-13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845MEDIUM4.64
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2.1~deb11u1
fixed in 5.2.5-2.1~deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
247.3-7+deb11u6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
247.3-7+deb11u6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
247.3-7+deb11u6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.31-13+deb11u11
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.31-13+deb11u11
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.31-13+deb11u11
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.18.3-6+deb11u5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libgcc-s1
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules-bin
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-runtime
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam0g
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libstdc++6
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2019-8457MEDIUM4.06
libdb5.3
5.3.28+dfsg1-0.8
No fix yet
45.4%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-modules-bin
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam-runtime
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-10041MEDIUM4
libpam0g
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u3
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libsystemd0
247.3-7+deb11u6
fixed in 247.3-7+deb11u7
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libudev1
247.3-7+deb11u6
fixed in 247.3-7+deb11u7
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.31-13+deb11u11
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.31-13+deb11u11
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-3715LOW3.98
bash
5.1-2+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1+deb11u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-8058LOW3.57
libc-bin
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.31-13+deb11u11
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc-bin
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.31-13+deb11u11
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-9820LOW3.4
libgnutls30
3.7.1-5+deb11u6
fixed in 3.7.1-5+deb11u9
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2016-2781LOW3.31
coreutils
8.32-4+b1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.7-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.31-13+deb11u11
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.31-13+deb11u11
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-14104LOW3.11
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
8.32-4+b1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.32.1-4+deb11u4
fixed in 5.32.1-4+deb11u5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
libssl1.1
1.1.1w-0+deb11u2
fixed in 1.1.1w-0+deb11u8
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.32.1-4+deb11u4
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2017-7245LOW2.81
libpcre3
2:8.39-13
No fix yet
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-7246LOW2.81
libpcre3
2:8.39-13
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
login
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
passwd
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2013-4392LOW2.8
libsystemd0
247.3-7+deb11u6
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
247.3-7+deb11u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
247.3-7+deb11u6
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
247.3-7+deb11u6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.31-13+deb11u11
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.31-13+deb11u11
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.8.7-6
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libgssapi-krb5-2
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libk5crypto3
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5-3
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5support0
1.18.3-6+deb11u5
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2017-11164LOW2.7
libpcre3
2:8.39-13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.32.1-4+deb11u4
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
login
1:4.8.1-1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.8.1-1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
8.32-4+b1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
login
1:4.8.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
passwd
1:4.8.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.10-4+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW2.29
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW2.29
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
8.32-4+b1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW2.24
coreutils
8.32-4+b1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-15649LOW1.99
perl-base
5.32.1-4+deb11u4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
login
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.32.1-4+deb11u4
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gpgv
2.2.27-2+deb11u2
fixed in 2.2.27-2+deb11u3
0.1%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-10-base
10.2.1-6
No fix yet
0.8%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-9-base
9.3.0-22
No fix yet
0.8%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.27-2+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.1-2+deb11u1
No fix yet
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53910NONE0
diffutils
1:3.7-5
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.20.13
fixed in 1.20.14
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53615NONE0
libmount1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libmount1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2025-27587NONE0
libssl1.1
1.1.1w-0+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.36.1-8+deb11u2
No fix yet
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.8.1-1
No fix yet
Not Applicable
CVE-2026-53615NONE0
mount
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
mount
2.36.1-8+deb11u2
No fix yet
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.8.1-1
No fix yet
Not Applicable
CVE-2026-57433NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.32.1-4+deb11u4
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
2.96-7+deb11u1
No fix yet
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1+deb11u1
No fix yet
Not Applicable
DLA-4085-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2025a-0+deb11u1
Not Applicable
DLA-4105-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2025b-0+deb11u1
Not Applicable
DLA-4403-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2025b-0+deb11u2
Not Applicable
DLA-4569-1NONE0
tzdata
2024b-0+deb11u1
fixed in 2026b-0+deb11u1
Not Applicable
CVE-2026-53615NONE0
util-linux
2.36.1-8+deb11u2
No fix yet
Not Applicable
CVE-2026-53613NONE0
util-linux
2.36.1-8+deb11u2
No fix yet
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.