Vulnerability Reportpython:3.11.16-slim-trixie

python:3.11.16-slim-trixiepython:3.11.16-slimpython:3.11-slim-trixiepython:3.11-slim

digestsha256:9534e5a8e315485d4061ed659af0fd78a284c015f9b73661b41d6bab25604534

Executive Summary

Last scanned: Sep 10, 2026

Threat ScoreCAUTION• 10 exposed findings meet or exceed severity 6.0 (max 6.63), matching the CAUTION band criterion of five or more exposed findings at severity >= 6.0; no exposed finding reaches 7.0.• Highest-impact issues are local privilege-escalation flaws in util-linux (CVE-2026-78410, CVE-2026-76642) affecting libmount, libblkid, libuuid, libsmartcols and liblastlog2 packages, all pinned at 2.41.5-0+deb13u1.• CVE-2026-54369 in libacl1 allows a local attacker controlling a pathname component to redirect ACL reads/writes via symlink traversal and escalate privileges.• The post-exploit-only set contributes no elevated risk: 78 findings, none at severity >= 6.0 (max 3.98).• Base image trust is solid (Docker Official, digest-pinned, 100/100), so risk comes from inherited package vulnerabilities rather than provenance.

50/100CAUTION

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most serious are local privilege-escalation flaws in util-linux (CVE-2026-78410, CVE-2026-76642) that let an unprivileged user with local access inside a container redirect a privileged mount or run privileged post-mount hooks, potentially gaining host-level privileges or altering file ownership, permissions and inherited SUID bits. These flaws only apply where fstab entries use X-mount owner, group, mode or idmap options together with a privileged SUID mount(8), so they are not reachable in images that do not rely on that mount path. Dependency packages such as acl add further local-only symlink-traversal risk to ACL operations on attacker-influenced paths, again requiring a privileged caller. The remaining inherited findings sit below the elevated-severity range (max 3.98) and read as low practical impact for typical container workloads. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Relevant for python:3.11.16-slim-trixie

How to fix CVEs in runtime Docker images

Only a handful of these findings are real. Five steps that cut the count — and VEX for the rest.

Read the article

Vulnerabilities

Vulnerability Log

182 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-78410	MEDIUM6.63	libblkid1 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Directly Exposed
CVE-2026-76642	MEDIUM6.63	liblastlog2-2 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-78410	MEDIUM6.63	liblastlog2-2 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Directly Exposed
CVE-2026-76642	MEDIUM6.63	libmount1 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-78410	MEDIUM6.63	libmount1 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Directly Exposed
CVE-2026-76642	MEDIUM6.63	libsmartcols1 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-78410	MEDIUM6.63	libsmartcols1 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Directly Exposed
CVE-2026-76642	MEDIUM6.63	libuuid1 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-78410	MEDIUM6.63	libuuid1 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Directly Exposed
CVE-2026-54369	MEDIUM6.03	libacl1 2.3.2-2+b1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-78409	MEDIUM5.95	libblkid1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-78409	MEDIUM5.95	liblastlog2-2 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-78409	MEDIUM5.95	libmount1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-78409	MEDIUM5.95	libsmartcols1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-78409	MEDIUM5.95	libuuid1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-77117	MEDIUM5.9	libc-bin 2.41-12+deb13u3 No fix yet	—	Directly Exposed
CVE-2026-80489	MEDIUM5.9	libc-bin 2.41-12+deb13u3 No fix yet	—	Directly Exposed
CVE-2026-77117	MEDIUM5.9	libc6 2.41-12+deb13u3 No fix yet	—	Directly Exposed
CVE-2026-80489	MEDIUM5.9	libc6 2.41-12+deb13u3 No fix yet	—	Directly Exposed
CVE-2026-6238	MEDIUM5.52	libc-bin 2.41-12+deb13u3 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-6238	MEDIUM5.52	libc6 2.41-12+deb13u3 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-54370	MEDIUM5.35	libacl1 2.3.2-2+b1 No fix yet	<0.1% Theoretical Threat	Directly Exposed
CVE-2026-54371	MEDIUM5.35	libattr1 1:2.5.2-3 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-11822	MEDIUM5.3	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	0.2% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-11824	MEDIUM5.3	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	0.2% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2019-1010024	MEDIUM5.3	libc-bin 2.41-12+deb13u3 No fix yet	3.2% Low-Moderate Risk	Directly Exposed
CVE-2019-1010025	MEDIUM5.3	libc-bin 2.41-12+deb13u3 No fix yet	2.3% Low-Moderate Risk	Directly Exposed
CVE-2019-1010024	MEDIUM5.3	libc6 2.41-12+deb13u3 No fix yet	3.2% Low-Moderate Risk	Directly Exposed
CVE-2019-1010025	MEDIUM5.3	libc6 2.41-12+deb13u3 No fix yet	2.3% Low-Moderate Risk	Directly Exposed
CVE-2026-5435	MEDIUM5.02	libc-bin 2.41-12+deb13u3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-6791	MEDIUM5.02	libc-bin 2.41-12+deb13u3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-5435	MEDIUM5.02	libc6 2.41-12+deb13u3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-6791	MEDIUM5.02	libc6 2.41-12+deb13u3 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2022-0563	MEDIUM4.67	libblkid1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-6368	MEDIUM4.67	libc-bin 2.41-12+deb13u3 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-6368	MEDIUM4.67	libc6 2.41-12+deb13u3 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2022-0563	MEDIUM4.67	liblastlog2-2 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2022-0563	MEDIUM4.67	libmount1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2022-0563	MEDIUM4.67	libsmartcols1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-50812	MEDIUM4.67	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-50813	MEDIUM4.67	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-15059	MEDIUM4.67	libsystemd0 257.13-1~deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-15059	MEDIUM4.67	libudev1 257.13-1~deb13u1 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2022-0563	MEDIUM4.67	libuuid1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-27171	MEDIUM4.67	zlib1g 1:1.3.dfsg+really1.3.1-1+b1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libblkid1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	liblastlog2-2 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libmount1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libsmartcols1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2023-31437	MEDIUM4.5	libsystemd0 257.13-1~deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2023-31438	MEDIUM4.5	libsystemd0 257.13-1~deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2023-31439	MEDIUM4.5	libsystemd0 257.13-1~deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2023-31437	MEDIUM4.5	libudev1 257.13-1~deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2023-31438	MEDIUM4.5	libudev1 257.13-1~deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2023-31439	MEDIUM4.5	libudev1 257.13-1~deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2026-3184	MEDIUM4.5	libuuid1 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2021-45346	MEDIUM4.3	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	1.6% Low-Moderate Risk	Directly Exposed
CVE-2026-42250	MEDIUM4.25	libbz2-1.0 1.0.8-6 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-5450	MEDIUM4.25	libc-bin 2.41-12+deb13u3 No fix yet	0.5% Theoretical Threat	Directly Exposed
CVE-2026-5928	MEDIUM4.25	libc-bin 2.41-12+deb13u3 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-5450	MEDIUM4.25	libc6 2.41-12+deb13u3 No fix yet	0.5% Theoretical Threat	Directly Exposed
CVE-2026-5928	MEDIUM4.25	libc6 2.41-12+deb13u3 No fix yet	0.4% Theoretical Threat	Directly Exposed
CVE-2026-19542	MEDIUM4.2	libc-bin 2.41-12+deb13u3 No fix yet	—	Directly Exposed
CVE-2026-19542	MEDIUM4.2	libc6 2.41-12+deb13u3 No fix yet	—	Directly Exposed
CVE-2026-18374	MEDIUM4.17	libc-bin 2.41-12+deb13u3 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2026-18374	MEDIUM4.17	libc6 2.41-12+deb13u3 No fix yet	0.1% Theoretical Threat	Directly Exposed
CVE-2010-4756	MEDIUM4	libc-bin 2.41-12+deb13u3 No fix yet	2.6% Low-Moderate Risk	Directly Exposed
CVE-2010-4756	MEDIUM4	libc6 2.41-12+deb13u3 No fix yet	2.6% Low-Moderate Risk	Directly Exposed
CVE-2026-76642	LOW3.98	bsdutils 1:2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-78410	LOW3.98	bsdutils 1:2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-76642	LOW3.98	mount 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-78410	LOW3.98	mount 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-48962	LOW3.98	perl-base 5.40.1-6 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-76642	LOW3.98	util-linux 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-78410	LOW3.98	util-linux 2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-57433	LOW3.82	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-9538	LOW3.82	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2011-3374	LOW3.7	libapt-pkg7.0 3.0.3 No fix yet	1.2% Low-Moderate Risk	Directly Exposed
CVE-2005-2541	LOW3.6	tar 1.35+dfsg-3.1 No fix yet	4.0% Low-Moderate Risk	Post-Exploit
CVE-2026-78409	LOW3.57	bsdutils 1:2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78409	LOW3.57	mount 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78409	LOW3.57	util-linux 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2019-1010022	LOW3.53	libc-bin 2.41-12+deb13u3 No fix yet	3.2% Low-Moderate Risk	Post-Exploit
CVE-2019-1010022	LOW3.53	libc6 2.41-12+deb13u3 No fix yet	3.2% Low-Moderate Risk	Post-Exploit
CVE-2025-15649	LOW3.31	perl-base 5.40.1-6 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-19487	LOW3.31	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-13346	LOW3.31	pip 24.0 fixed in 26.2.0	0.3% Theoretical Threat	Post-Exploit
CVE-2019-1010023	LOW3.17	libc-bin 2.41-12+deb13u3 No fix yet	3.0% Low-Moderate Risk	Post-Exploit
CVE-2019-1010023	LOW3.17	libc6 2.41-12+deb13u3 No fix yet	3.0% Low-Moderate Risk	Post-Exploit
CVE-2026-56391	LOW3.11	coreutils 9.7-3 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-56392	LOW3.11	coreutils 9.7-3 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-59890	LOW3.11	setuptools 79.0.1 fixed in 83.0.0	0.4% Theoretical Threat	Post-Exploit
CVE-2026-8376	LOW3	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-6357	LOW2.96	pip 24.0 fixed in 26.1	0.1% Theoretical Threat	Post-Exploit
CVE-2026-15534	LOW2.91	perl-base 5.40.1-6 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2022-0563	LOW2.8	bsdutils 1:2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2022-0563	LOW2.8	mount 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-5704	LOW2.8	tar 1.35+dfsg-3.1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2022-0563	LOW2.8	util-linux 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-8643	LOW2.8	pip 24.0 fixed in 26.1.2	0.3% Theoretical Threat	Post-Exploit
CVE-2026-24049	LOW2.8	wheel 0.45.1 fixed in 0.46.2	0.3% Theoretical Threat	Post-Exploit
CVE-2025-70873	LOW2.8	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	0.3% Theoretical Threat	Directly Exposed
CVE-2013-4392	LOW2.8	libsystemd0 257.13-1~deb13u1 No fix yet	0.5% Theoretical Threat	Directly Exposed
CVE-2026-40228	LOW2.8	libsystemd0 257.13-1~deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2013-4392	LOW2.8	libudev1 257.13-1~deb13u1 No fix yet	0.5% Theoretical Threat	Directly Exposed
CVE-2026-40228	LOW2.8	libudev1 257.13-1~deb13u1 No fix yet	0.2% Theoretical Threat	Directly Exposed
CVE-2026-13221	LOW2.78	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-42496	LOW2.78	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2018-20796	LOW2.7	libc-bin 2.41-12+deb13u3 No fix yet	5.8% Low-Moderate Risk	Post-Exploit
CVE-2019-9192	LOW2.7	libc-bin 2.41-12+deb13u3 No fix yet	2.4% Low-Moderate Risk	Post-Exploit
CVE-2018-20796	LOW2.7	libc6 2.41-12+deb13u3 No fix yet	5.8% Low-Moderate Risk	Post-Exploit
CVE-2019-9192	LOW2.7	libc6 2.41-12+deb13u3 No fix yet	2.4% Low-Moderate Risk	Post-Exploit
CVE-2026-3184	LOW2.7	bsdutils 1:2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-53910	LOW2.7	diffutils 1:3.10-4 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-3184	LOW2.7	mount 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-12087	LOW2.7	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-3184	LOW2.7	util-linux 2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2025-8869	LOW2.7	pip 24.0 fixed in 25.3	0.5% Theoretical Threat	Post-Exploit
CVE-2026-16742	LOW2.69	libsystemd0 257.13-1~deb13u1 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-16742	LOW2.69	libudev1 257.13-1~deb13u1 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-57432	LOW2.57	perl-base 5.40.1-6 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-48959	LOW2.55	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-48961	LOW2.55	perl-base 5.40.1-6 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-3219	LOW2.55	pip 24.0 fixed in 26.1	0.1% Theoretical Threat	Post-Exploit
CVE-2007-5686	LOW2.5	passwd 1:4.17.4-2 No fix yet	0.9% Theoretical Threat	Post-Exploit
CVE-2026-19499	LOW2.45	libc-bin 2.41-12+deb13u3 No fix yet	—	Post-Exploit
CVE-2026-19499	LOW2.45	libc6 2.41-12+deb13u3 No fix yet	—	Post-Exploit
CVE-2026-78408	LOW2.42	bsdutils 1:2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	libblkid1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	liblastlog2-2 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	libmount1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	libsmartcols1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	libuuid1 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	mount 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2026-78408	LOW2.42	util-linux 2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2017-18018	LOW2.4	coreutils 9.7-3 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-41991	LOW2.4	gzip 1.13-1 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-76642	LOW2.39	libblkid1 2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Post-Exploit
CVE-2026-41992	LOW2.29	gzip 1.13-1 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2026-42497	LOW2.29	perl-base 5.40.1-6 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2025-5278	LOW2.24	coreutils 9.7-3 No fix yet	0.3% Theoretical Threat	Post-Exploit
CVE-2026-18477	LOW2.24	tar 1.35+dfsg-3.1 No fix yet	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-18508	LOW2.24	tar 1.35+dfsg-3.1 No fix yet	0.1% Theoretical Threat	Post-Exploit
CVE-2011-3374	LOW2.22	apt 3.0.3 No fix yet	1.2% Low-Moderate Risk	Post-Exploit
CVE-2026-1703	LOW1.99	pip 24.0 fixed in 26.0	0.4% Theoretical Threat	Post-Exploit
CVE-2024-56433	LOW1.84	passwd 1:4.17.4-2 No fix yet	0.4% Theoretical Threat	Post-Exploit
CVE-2011-4116	LOW1.68	perl-base 5.40.1-6 No fix yet	0.5% Theoretical Threat	Post-Exploit
CVE-2026-23949	NONE0	jaraco.context 5.3.0 fixed in 6.1.0	0.6% Theoretical Threat	Not Applicable
CVE-2026-78408	NONE0	login 1:4.16.0-2+really2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2025-69720	NONE0	libncursesw6 6.5+20250216-2 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2025-69720	NONE0	libtinfo6 6.5+20250216-2 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2026-76642	NONE0	login 1:4.16.0-2+really2.41.5-0+deb13u1 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2026-78410	NONE0	login 1:4.16.0-2+really2.41.5-0+deb13u1 No fix yet	<0.1% Theoretical Threat	Not Applicable
CVE-2025-69720	NONE0	ncurses-base 6.5+20250216-2 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2025-69720	NONE0	ncurses-bin 6.5+20250216-2 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2026-78409	NONE0	login 1:4.16.0-2+really2.41.5-0+deb13u1 No fix yet	0.1% Theoretical Threat	Not Applicable
CVE-2022-0563	NONE0	login 1:4.16.0-2+really2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2026-3184	NONE0	login 1:4.16.0-2+really2.41.5-0+deb13u1 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2007-5686	NONE0	login.defs 1:4.17.4-2 No fix yet	0.9% Theoretical Threat	Not Applicable
CVE-2026-54411	NONE0	libpam-modules 1.7.0-5 No fix yet	0.3% Theoretical Threat	Not Applicable
CVE-2026-54411	NONE0	libpam-modules-bin 1.7.0-5 No fix yet	0.3% Theoretical Threat	Not Applicable
CVE-2026-54411	NONE0	libpam-runtime 1.7.0-5 No fix yet	0.3% Theoretical Threat	Not Applicable
CVE-2026-54411	NONE0	libpam0g 1.7.0-5 No fix yet	0.3% Theoretical Threat	Not Applicable
CVE-2024-56433	NONE0	login.defs 1:4.17.4-2 No fix yet	0.4% Theoretical Threat	Not Applicable
CVE-2025-6141	NONE0	libncursesw6 6.5+20250216-2 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2025-6141	NONE0	libtinfo6 6.5+20250216-2 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2025-6141	NONE0	ncurses-base 6.5+20250216-2 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2025-6141	NONE0	ncurses-bin 6.5+20250216-2 No fix yet	0.2% Theoretical Threat	Not Applicable
TEMP-0841856-B18BAF	NONE0	bash 5.2.37-2+b9 No fix yet	—	Not Applicable
CVE-2026-86145	NONE0	libpcre2-8-0 10.46-1~deb13u1 No fix yet	0.4% Theoretical Threat	Not Applicable
TEMP-0000000-21C4F8	NONE0	libpcre2-8-0 10.46-1~deb13u1 No fix yet	—	Not Applicable
TEMP-0000000-8188AC	NONE0	libpcre2-8-0 10.46-1~deb13u1 No fix yet	—	Not Applicable
TEMP-0000000-A5518C	NONE0	libpcre2-8-0 10.46-1~deb13u1 No fix yet	—	Not Applicable
TEMP-0000000-B05303	NONE0	libpcre2-8-0 10.46-1~deb13u1 No fix yet	—	Not Applicable
CVE-2026-39113	NONE0	libsqlite3-0 3.46.1-7+deb13u1 No fix yet	0.2% Theoretical Threat	Not Applicable
TEMP-0628843-DBAD28	NONE0	login.defs 1:4.17.4-2 No fix yet	—	Not Applicable
TEMP-0628843-DBAD28	NONE0	passwd 1:4.17.4-2 No fix yet	—	Not Applicable
CVE-2026-7010	NONE0	perl-base 5.40.1-6 No fix yet	0.2% Theoretical Threat	Not Applicable
CVE-2026-7017	NONE0	perl-base 5.40.1-6 No fix yet	0.2% Theoretical Threat	Not Applicable
TEMP-0517018-A83CE6	NONE0	sysvinit-utils 3.14-4 No fix yet	—	Not Applicable
TEMP-0290435-0B57B5	NONE0	tar 1.35+dfsg-3.1 No fix yet	—	Not Applicable
CVE-2026-85091	NONE0	zlib1g 1:1.3.dfsg+really1.3.1-1+b1 No fix yet	0.4% Theoretical Threat	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.