Vulnerability Reportoven/bun:1.2.10-debian

oven/bun:1.2.10-debian
digestsha256:060c7c51a6bcd69e764f723d52f516214d37775282342dbd82c2765fcd2c37ec

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The image exposes 106 vulnerabilities, with 7 rated at severity 6.0 or higher, including CVE-2026-29111 (local privilege escalation/DoS in systemd) and CVE-2026-3833 (certificate validation bypass in GnuTLS). An attacker could disrupt service availability, bypass certificate checks to enable spoofing or man-in-the-middle attacks, or escalate privileges locally. Although the image comes from a popular and reliable publisher and is pinned by digest, these medium-severity flaws require attention before production use.

Hardening plan for this image · 3 steps. The first cuts risk from 50 to 42.

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

230 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-29111MEDIUM6.63
libsystemd0
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.10.1-3
fixed in 1.10.1-3+deb12u1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.3.1-3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u11
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-4878MEDIUM5.95
libcap2
1:2.66-4
fixed in 1:2.66-4+deb12u3
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.1-3
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.19.0-2+deb12u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-4105MEDIUM5.7
libsystemd0
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4105MEDIUM5.7
libudev1
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.1%
Theoretical Threat
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.9-2+deb12u4
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.36-9+deb12u10
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.36-9+deb12u10
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
252.36-1~deb12u1
fixed in 252.39-1~deb12u2
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.3.1-3
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.1-4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.36-9+deb12u10
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.36-9+deb12u10
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.36-9+deb12u10
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.36-9+deb12u10
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2025-32989MEDIUM5.3
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u5
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.24.1-2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-1390MEDIUM5.18
libcap2
1:2.66-4
fixed in 1:2.66-4+deb12u1
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.36-9+deb12u10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.36-9+deb12u10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
gcc-12-base
12.2.0-14
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.2.0-14
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.2.0-14
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.13.dfsg-1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.4.1-1
fixed in 5.4.1-1+deb12u1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
252.36-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
252.36-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
252.36-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
252.36-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
252.36-1~deb12u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
252.36-1~deb12u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5+b1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.36-9+deb12u10
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.36-9+deb12u10
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.36-9+deb12u10
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.36-9+deb12u10
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
gcc-12-base
12.2.0-14
fixed in 12.2.0-14+deb12u1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libgcc-s1
12.2.0-14
fixed in 12.2.0-14+deb12u1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libstdc++6
12.2.0-14
fixed in 12.2.0-14+deb12u1
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libsystemd0
252.36-1~deb12u1
fixed in 252.38-1~deb12u1
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libudev1
252.36-1~deb12u1
fixed in 252.38-1~deb12u1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.36-9+deb12u10
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.36-9+deb12u10
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-48962LOW3.98
perl-base
5.36.0-7+deb12u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-56406LOW3.72
perl-base
5.36.0-7+deb12u1
fixed in 5.36.0-7+deb12u2
0.5%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.6.1
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1.2+deb12u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-8058LOW3.57
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u13
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u13
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc-bin
2.36-9+deb12u10
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.36-9+deb12u10
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42010LOW3.53
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.13.dfsg-1
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-4438LOW3.4
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4438LOW3.4
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-9820LOW3.4
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u6
0.2%
Theoretical Threat
Directly Exposed
CVE-2016-2781LOW3.31
coreutils
9.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.36.0-7+deb12u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.9-1
fixed in 4.9-1+deb12u1
0.1%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.36-9+deb12u10
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.36-9+deb12u10
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-5419LOW3.15
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14104LOW3.11
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
9.1-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.36.0-7+deb12u1
fixed in 5.36.0-7+deb12u3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-32988LOW2.95
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u5
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-31484LOW2.92
perl-base
5.36.0-7+deb12u1
fixed in 5.36.0-7+deb12u3
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.36.0-7+deb12u1
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
passwd
1:4.13+dfsg1-1+b1
fixed in 1:4.13+dfsg1-1+deb12u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1.2+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2013-4392LOW2.8
libsystemd0
252.36-1~deb12u1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
252.36-1~deb12u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
252.36-1~deb12u1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
252.36-1~deb12u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.36-9+deb12u10
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc-bin
2.36-9+deb12u10
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.36-9+deb12u10
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.36-9+deb12u10
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.10.1-3
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2026-33846LOW2.7
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-42009LOW2.7
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.36.0-7+deb12u1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.36.0-7+deb12u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-32990LOW2.51
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-42013LOW2.51
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5260LOW2.51
libgnutls30
3.7.9-2+deb12u4
fixed in 3.7.9-2+deb12u7
0.7%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.13+dfsg1-1+b1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-0861LOW2.48
libc-bin
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-0861LOW2.48
libc6
2.36-9+deb12u10
fixed in 2.36-9+deb12u14
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
9.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux-extra
2.38.1-5+deb12u3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.12-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW2.29
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW2.29
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.1-1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW2.24
coreutils
9.1-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.6.1
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-1+b1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.13+dfsg1-1+b1
fixed in 1:4.13+dfsg1-1+deb12u1
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.36.0-7+deb12u1
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-6020NONE0
libpam-modules
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules-bin
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-runtime
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam0g
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4-4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4-4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4-4
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gpgv
2.2.40-1.1
fixed in 2.2.40-1.1+deb12u2
0.1%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.4-4
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.4-4
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.4-4
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam-modules
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam-modules-bin
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam-runtime
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam0g
1.5.2-6+deb12u1
fixed in 1.5.2-6+deb12u2
0.5%
Theoretical Threat
Not Applicable
CVE-2023-4641NONE0
login
1:4.13+dfsg1-1+b1
fixed in 1:4.13+dfsg1-1+deb12u1
0.3%
Theoretical Threat
Not Applicable
CVE-2007-5686NONE0
login
1:4.13+dfsg1-1+b1
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.40-1.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.40-1.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules-bin
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-runtime
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam0g
1.5.2-6+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-1+b1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.40-1.1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2023-29383NONE0
login
1:4.13+dfsg1-1+b1
fixed in 1:4.13+dfsg1-1+deb12u1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.4-4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gpgv
2.2.40-1.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.2.15-2+b7
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53910NONE0
diffutils
1:3.8-4
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-2219NONE0
dpkg
1.21.22
fixed in 1.21.23
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.21.22
fixed in 1.21.23
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libmount1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.13+dfsg1-1+b1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
mount
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
mount
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.13+dfsg1-1+b1
No fix yet
—
Not Applicable
CVE-2026-57433NONE0
perl-base
5.36.0-7+deb12u1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-base
5.36.0-7+deb12u1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.36.0-7+deb12u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
3.06-4
No fix yet
—
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1.2+deb12u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
util-linux
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
util-linux
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
util-linux-extra
2.38.1-5+deb12u3
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
util-linux-extra
2.38.1-5+deb12u3
No fix yet
—
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.