Vulnerability Reportrabbitmq:4.3.6-management-alpine

rabbitmq:4.3.6-management-alpinerabbitmq:4.3-management-alpine

digestsha256:3505b6096cdbc083bcc363e74366f575ecd0c1a55be4dadcbc60fa08e34647e1

Executive Summary

Last scanned: Oct 21, 2026

Threat ScoreSAFE• Pre-calculated threat score is 0, which falls in the SAFE band (0-24).• The image is an official Docker Official image and is pinned by digest, supporting trust and immutability.• Vulnerability stats report 1 exposed finding, but exposed_max_severity is 0.0 and exposed_count_ge6 is 0.• There are 0 post-exploit-only findings, with post_max_severity 0.0 and post_count_ge6 0.• No CVE IDs are provided in the exposed-surface or post-exploit-only findings.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. It is an official Docker image pinned by digest, with a trusted reputation. The vulnerability stats report 1 exposed finding, but the maximum severity is 0.0 and there are no findings at severity 6.0 or higher, so it does not change the production-use verdict. No post-exploit-only findings are present.

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-85091	NONE0	zlib 1.3.2-r0 fixed in 1.3.2-r1	0.4% Theoretical Threat	Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.