Vulnerability Reportprom/statsd-exporter:v0

prom/statsd-exporter:latestprom/statsd-exporter:v0
digestsha256:378cb79c4ac7d6941e5ed71b1f3cd6f4707cf42c72c104ffe81fa4d9026ef659

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
RELIABLE

This image is safe for production use. It has a high reputation with over 122 million pulls from a trusted community publisher. The threat score is 0, and all identified vulnerabilities are low severity (max 5.1) with no practical exploitable impact in this context. The image is pinned by digest, ensuring consistency and integrity.

Already in good shape · 3 hardening steps left

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

29 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42504MEDIUM5.1
stdlib
v1.26.3
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-39833MEDIUM4.67
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42506MEDIUM4.59
golang.org/x/net
v0.51.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-46598MEDIUM4.5
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42505MEDIUM4.5
stdlib
v1.26.3
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42507MEDIUM4.5
stdlib
v1.26.3
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39828LOW2.69
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-39832LOW2.66
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-39821LOW2.51
golang.org/x/net
v0.51.0
fixed in 0.55.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-39831LOW2.48
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-25681LOW2.48
golang.org/x/net
v0.51.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27136LOW2.48
golang.org/x/net
v0.51.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-39822LOW2.39
stdlib
v1.26.3
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-39829LOW2.29
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-39830LOW2.29
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-39835LOW2.29
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-46597LOW2.29
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-33814LOW2.29
golang.org/x/net
v0.51.0
fixed in 0.53.0
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-27145LOW2.29
stdlib
v1.26.3
fixed in 1.25.11, 1.26.4
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-42508LOW2.26
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-46595LOW2.17
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-39827LOW1.99
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-39834LOW1.99
golang.org/x/crypto
v0.49.0
fixed in 0.52.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-25680LOW1.99
golang.org/x/net
v0.51.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42502LOW1.87
golang.org/x/net
v0.51.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
GO-2026-5932NONE0
golang.org/x/crypto
v0.49.0
No fix yet
—
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.51.0
fixed in 0.56.0
—
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.42.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.35.0
fixed in 0.39.0
—
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.