Vulnerability Reportoven/bun:1.3.11-distroless

oven/bun:1.3.11-distroless
digestsha256:6a78966e057efd546873b64d6c173b18a21a10c3da81562863beeaf044c1e2ec

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
RELIABLE

This image is safe for production use. Although the vulnerability scan reports a small number of low-severity issues (exposed max severity 4.42, post-exploit max 3.53), none of them reach a level of concern and no exploitable findings were identified in the provided inputs. The image is a popular community build with a strong trust score and is pinned by digest, ensuring consistency and supply-chain integrity. No critical or high-severity risks are present, and no CVEs were provided to warrant further mitigation.

Vulnerabilities

Vulnerability Log

14 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-4437MEDIUM4.42
libc6
2.41-12+deb13u2
fixed in 2.41-12+deb13u3
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-5450MEDIUM4.25
libc6
2.41-12+deb13u2
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.41-12+deb13u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc6
2.41-12+deb13u2
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-4438LOW3.4
libc6
2.41-12+deb13u2
fixed in 2.41-12+deb13u3
0.3%
Theoretical Threat
Directly Exposed
CVE-2019-1010023LOW3.17
libc6
2.41-12+deb13u2
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.41-12+deb13u2
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.41-12+deb13u2
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2026-6238LOW1.99
libc6
2.41-12+deb13u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2019-1010024LOW1.91
libc6
2.41-12+deb13u2
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010025LOW1.91
libc6
2.41-12+deb13u2
No fix yet
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-5435LOW1.81
libc6
2.41-12+deb13u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-4046LOW1.62
libc6
2.41-12+deb13u2
fixed in 2.41-12+deb13u3
0.4%
Theoretical Threat
Post-Exploit
CVE-2010-4756LOW1.44
libc6
2.41-12+deb13u2
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.