Vulnerability Reportprom/prometheus:latest

prom/prometheus:latestprom/prometheus:v3prom/prometheus:v3-busyboxprom/prometheus:latest-busyboxprom/prometheus:v3.13.1prom/prometheus:v3.13.1-busybox

DIGESTsha256:3c42b892cf723fa54d2f262c37a0e1f80aa8c8ddb1da7b9b0df9455a35a7f893

Executive Summary

Last scanned: Jul 23, 2026

Threat ScoreSAFE• Image from highly reputable community publisher (1987M+ pulls)• Pinned by digest for immutability• Threat score is 0, indicating no exploitable vulnerabilities• No exposed surface findings above severity 0.0

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (1987M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. While 4 low-severity vulnerabilities are present, they have no exploitable impact (max severity 0.0). The image is widely trusted with over 1.9 billion pulls and is pinned by digest, ensuring integrity. No additional mitigations are required.

Vulnerabilities

Vulnerability Log

4 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
GO-2026-5932	NONE0	golang.org/x/crypto v0.52.0 No fix yet	—	Not Applicable
CVE-2026-46600	NONE0	golang.org/x/net v0.55.0 fixed in 0.56.0	—	Not Applicable
CVE-2026-56852	NONE0	golang.org/x/text v0.38.0 fixed in 0.39.0	—	Not Applicable
GHSA-hrxh-6v49-42gf	NONE0	google.golang.org/grpc v1.81.1 fixed in 1.82.1	—	Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.